tinba | 6d59d844329dba82ae8d3e7ff2d6d299d1f7751a2ff5e3a598698102b02a301d | Triage

Sharing

General

Target

6d59d844329dba82ae8d3e7ff2d6d299d1f7751a2ff5e3a598698102b02a301d
Size

225KB
Sample

250105-yj992awpaj
MD5

a9a3a5adbb8e9455108bbb186da043fd
SHA1

779f0938ffa05c7d2277f55cf695349e27284934
SHA256

6d59d844329dba82ae8d3e7ff2d6d299d1f7751a2ff5e3a598698102b02a301d
SHA512

0c4e0161f7a9f7ac48b76e5450bd332086ea8de3da559b4592eb9c3696bda94ee4debbde5f50686aec9c65fa2c929891d04b0a00667a416b55db40fdf49376f5
SSDEEP

6144:EA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:EATuTAnKGwUAW3ycQqgX

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  6d59d844329dba82ae8d3e7ff2d6d299d1f7751a2ff5e3a598698102b02a301d
- Size
  
  225KB
- MD5
  
  a9a3a5adbb8e9455108bbb186da043fd
- SHA1
  
  779f0938ffa05c7d2277f55cf695349e27284934
- SHA256
  
  6d59d844329dba82ae8d3e7ff2d6d299d1f7751a2ff5e3a598698102b02a301d
- SHA512
  
  0c4e0161f7a9f7ac48b76e5450bd332086ea8de3da559b4592eb9c3696bda94ee4debbde5f50686aec9c65fa2c929891d04b0a00667a416b55db40fdf49376f5
- SSDEEP
  
  6144:EA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:EATuTAnKGwUAW3ycQqgX
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2