tinba | da75a873d55ddbbc96bb55b7dafa3947f5a84d9b3faf833ada0760baf321e318 | Triage

Sharing

General

Target

da75a873d55ddbbc96bb55b7dafa3947f5a84d9b3faf833ada0760baf321e318
Size

225KB
Sample

241231-e7313sxqey
MD5

721a1bfb2d354e94b2ba30c3fad33b40
SHA1

9bfd149db693d9c76600354b0df5df544b4af121
SHA256

da75a873d55ddbbc96bb55b7dafa3947f5a84d9b3faf833ada0760baf321e318
SHA512

a484cb6f88cbab97f2f7eaafb38f264cb6b92c84073a61fd0d29cc8663bf9055569ee29f7c4ed584084d91f7a5289615f0fa2b3cd05f79043c2cd8bdbfd5240a
SSDEEP

6144:AA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:AATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  da75a873d55ddbbc96bb55b7dafa3947f5a84d9b3faf833ada0760baf321e318
- Size
  
  225KB
- MD5
  
  721a1bfb2d354e94b2ba30c3fad33b40
- SHA1
  
  9bfd149db693d9c76600354b0df5df544b4af121
- SHA256
  
  da75a873d55ddbbc96bb55b7dafa3947f5a84d9b3faf833ada0760baf321e318
- SHA512
  
  a484cb6f88cbab97f2f7eaafb38f264cb6b92c84073a61fd0d29cc8663bf9055569ee29f7c4ed584084d91f7a5289615f0fa2b3cd05f79043c2cd8bdbfd5240a
- SSDEEP
  
  6144:AA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:AATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2