tinba | 221bb28430ad2691c47a0640a979e6e5af34d34ac2da1e1360639647b4af2131 | Triage

Sharing

General

Target

221bb28430ad2691c47a0640a979e6e5af34d34ac2da1e1360639647b4af2131
Size

225KB
Sample

250101-zk9wbswkap
MD5

492cc36b1729bcecd188318cd24f2589
SHA1

f9c447a0309d4a35bbba2d96d20168b683f35263
SHA256

221bb28430ad2691c47a0640a979e6e5af34d34ac2da1e1360639647b4af2131
SHA512

1461722edc3327cb29a4f2e6bc5f74dde29d452229be472fb11632fbb8ceeb290e0366553373faabfdf54cec2225315a194617eb5343891b8b656fd53018aed5
SSDEEP

6144:AA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:AATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  221bb28430ad2691c47a0640a979e6e5af34d34ac2da1e1360639647b4af2131
- Size
  
  225KB
- MD5
  
  492cc36b1729bcecd188318cd24f2589
- SHA1
  
  f9c447a0309d4a35bbba2d96d20168b683f35263
- SHA256
  
  221bb28430ad2691c47a0640a979e6e5af34d34ac2da1e1360639647b4af2131
- SHA512
  
  1461722edc3327cb29a4f2e6bc5f74dde29d452229be472fb11632fbb8ceeb290e0366553373faabfdf54cec2225315a194617eb5343891b8b656fd53018aed5
- SSDEEP
  
  6144:AA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:AATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2