tinba | 74e7f6690f05ee4303f5de3880170df6306736508c2227c4aa319c799051b428 | Triage

Sharing

General

Target

JaffaCakes118_babccaf657298d70471771c106155a7d
Size

428KB
Sample

250105-ypfbvawqaq
MD5

babccaf657298d70471771c106155a7d
SHA1

6601807cf5c92f22768d241baaa28c6dc78dc30f
SHA256

74e7f6690f05ee4303f5de3880170df6306736508c2227c4aa319c799051b428
SHA512

b266fec3df678ceeadc6cd604ef4594b31a81ea5a62ea571732948d2f931c59480eae4a169ec912571e41e113d69ab61df4d6392e490742973315608c7abe8e0
SSDEEP

6144:7CE6/mUXJ531nIUliViSZbLhaZfvMlLXICg2vj7Oyz:l6TOUMBQf0ljW2vj7Oyz

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_babccaf657298d70471771c106155a7d
- Size
  
  428KB
- MD5
  
  babccaf657298d70471771c106155a7d
- SHA1
  
  6601807cf5c92f22768d241baaa28c6dc78dc30f
- SHA256
  
  74e7f6690f05ee4303f5de3880170df6306736508c2227c4aa319c799051b428
- SHA512
  
  b266fec3df678ceeadc6cd604ef4594b31a81ea5a62ea571732948d2f931c59480eae4a169ec912571e41e113d69ab61df4d6392e490742973315608c7abe8e0
- SSDEEP
  
  6144:7CE6/mUXJ531nIUliViSZbLhaZfvMlLXICg2vj7Oyz:l6TOUMBQf0ljW2vj7Oyz
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2