tinba | 231b1836d30171370fe32ccaf75405a17b3331723bbb3098acd7bc80b936eb1a | Triage

Sharing

General

Target

231b1836d30171370fe32ccaf75405a17b3331723bbb3098acd7bc80b936eb1a
Size

610KB
Sample

241226-zbbxyaypbl
MD5

74ed476b2e7a9fb6f81f1b6903d1d367
SHA1

07f40ebd6ec2084d4a6eb76fe7c14fcf7b2b1028
SHA256

231b1836d30171370fe32ccaf75405a17b3331723bbb3098acd7bc80b936eb1a
SHA512

61b705ab1bd82cd77d5efd13c7b66b343332483f8d9ad07e8acac20f375e5a711898b0501f1b952da273fcadedee20a6d36316e5f8524bdee4cf403150667d24
SSDEEP

12288:UATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+E:KT+KjUdQqboyyWoK1NGqzuhZ

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  231b1836d30171370fe32ccaf75405a17b3331723bbb3098acd7bc80b936eb1a
- Size
  
  610KB
- MD5
  
  74ed476b2e7a9fb6f81f1b6903d1d367
- SHA1
  
  07f40ebd6ec2084d4a6eb76fe7c14fcf7b2b1028
- SHA256
  
  231b1836d30171370fe32ccaf75405a17b3331723bbb3098acd7bc80b936eb1a
- SHA512
  
  61b705ab1bd82cd77d5efd13c7b66b343332483f8d9ad07e8acac20f375e5a711898b0501f1b952da273fcadedee20a6d36316e5f8524bdee4cf403150667d24
- SSDEEP
  
  12288:UATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+E:KT+KjUdQqboyyWoK1NGqzuhZ
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2