tinba | 68ef3fdecd9e3a995ee2a5cecc8742f35fb49c2a1dd3cc208322ecd70b7e77d8 | Triage

Sharing

General

Target

JaffaCakes118_154c5af1e367afa1654e6ace851b15b1
Size

49KB
Sample

241231-mn1qlsynfj
MD5

154c5af1e367afa1654e6ace851b15b1
SHA1

8d46d47c3f9db51f4efe563d9343ca80fd178cf8
SHA256

68ef3fdecd9e3a995ee2a5cecc8742f35fb49c2a1dd3cc208322ecd70b7e77d8
SHA512

00fe52f05b3f44758db0a725cba5176efac6655d459ec0411bf67bea1317d10203f3be4ec7f82af8ca5679c9d054130c53aeb6b4c2632927a123dfc985a6e189
SSDEEP

768:/CCCFlkbwAYbFshpyiB9L9Mx2BWseUCHGAwk5R9Jw:bbw/6plBTFBYNNR9Jw

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_154c5af1e367afa1654e6ace851b15b1
- Size
  
  49KB
- MD5
  
  154c5af1e367afa1654e6ace851b15b1
- SHA1
  
  8d46d47c3f9db51f4efe563d9343ca80fd178cf8
- SHA256
  
  68ef3fdecd9e3a995ee2a5cecc8742f35fb49c2a1dd3cc208322ecd70b7e77d8
- SHA512
  
  00fe52f05b3f44758db0a725cba5176efac6655d459ec0411bf67bea1317d10203f3be4ec7f82af8ca5679c9d054130c53aeb6b4c2632927a123dfc985a6e189
- SSDEEP
  
  768:/CCCFlkbwAYbFshpyiB9L9Mx2BWseUCHGAwk5R9Jw:bbw/6plBTFBYNNR9Jw
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan