tinba | 7a9e50aefbe2bc256300765624aa7bd7e54b63061989f4a219c3111817be994f | Triage

Sharing

General

Target

7a9e50aefbe2bc256300765624aa7bd7e54b63061989f4a219c3111817be994f
Size

152KB
Sample

250120-frc1dssrbq
MD5

75b50fca5607bbb290e956b8d2244743
SHA1

297782ef89c0ce1787bd888bfd763caefdee22ec
SHA256

7a9e50aefbe2bc256300765624aa7bd7e54b63061989f4a219c3111817be994f
SHA512

37ef0fa0b04fc1b2c191d021b43d65097545f5af239e4b248f47eb2a64c182778ea9bcad161c4d412dfdb0f1a43ef11b1e60d1f0fc1e11d78ff12954e4f04550
SSDEEP

1536:gH1k5kZccmK9OM1q6wY/6nBRiOW+bUciXDyeAvX0J7M6QG9wIav2U6q:syM3ERQoem9G9wluu

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  7a9e50aefbe2bc256300765624aa7bd7e54b63061989f4a219c3111817be994f
- Size
  
  152KB
- MD5
  
  75b50fca5607bbb290e956b8d2244743
- SHA1
  
  297782ef89c0ce1787bd888bfd763caefdee22ec
- SHA256
  
  7a9e50aefbe2bc256300765624aa7bd7e54b63061989f4a219c3111817be994f
- SHA512
  
  37ef0fa0b04fc1b2c191d021b43d65097545f5af239e4b248f47eb2a64c182778ea9bcad161c4d412dfdb0f1a43ef11b1e60d1f0fc1e11d78ff12954e4f04550
- SSDEEP
  
  1536:gH1k5kZccmK9OM1q6wY/6nBRiOW+bUciXDyeAvX0J7M6QG9wIav2U6q:syM3ERQoem9G9wluu
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2