tinba | c7b2c7fb4d47128514de6cfab56f4d14b22b39908452de33c343d4fdc3d18a09 | Triage

Sharing

General

Target

c7b2c7fb4d47128514de6cfab56f4d14b22b39908452de33c343d4fdc3d18a09
Size

152KB
Sample

250115-jj5l8awjfw
MD5

10deaea329eaabf2680cb7824d2df8df
SHA1

cf843b1a83d9fc9c48add7ea98c4cc953023ae20
SHA256

c7b2c7fb4d47128514de6cfab56f4d14b22b39908452de33c343d4fdc3d18a09
SHA512

d5859a80a810510fd59889af9b6adcc70e1e0a57b13a8ca637b979cd694648708bbd6497eeef61ca1c54569831c5fad028aa567a862fe1cd725dd3fa9ae9bc58
SSDEEP

1536:wH1k5kZccmK9OM1q6wY/6nBRiOW+bUciXDyeAvX0J7M6QG9wIav2U6q:8yM3ERQoem9G9wluu

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  c7b2c7fb4d47128514de6cfab56f4d14b22b39908452de33c343d4fdc3d18a09
- Size
  
  152KB
- MD5
  
  10deaea329eaabf2680cb7824d2df8df
- SHA1
  
  cf843b1a83d9fc9c48add7ea98c4cc953023ae20
- SHA256
  
  c7b2c7fb4d47128514de6cfab56f4d14b22b39908452de33c343d4fdc3d18a09
- SHA512
  
  d5859a80a810510fd59889af9b6adcc70e1e0a57b13a8ca637b979cd694648708bbd6497eeef61ca1c54569831c5fad028aa567a862fe1cd725dd3fa9ae9bc58
- SSDEEP
  
  1536:wH1k5kZccmK9OM1q6wY/6nBRiOW+bUciXDyeAvX0J7M6QG9wIav2U6q:8yM3ERQoem9G9wluu
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2