tinba | 4036200c541642b23ed991c1b25a2fa4595416f50a97343b6423c62003b87eb8 | Triage

Sharing

General

Target

4036200c541642b23ed991c1b25a2fa4595416f50a97343b6423c62003b87eb8
Size

225KB
Sample

250224-17j4vs1jt4
MD5

76e52ff165c2e1f9a55a715072df093b
SHA1

24848bbbdab9b669311d35fd3fb7d995afc4bbb5
SHA256

4036200c541642b23ed991c1b25a2fa4595416f50a97343b6423c62003b87eb8
SHA512

9a3827174aaa394413d1a288d9df5b15bcf9661620033401b707e71307d1fd18dc7b7effee7f345310b88ec13c31e5337394c56a6652259ff38c37c6041601ac
SSDEEP

6144:DA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:DATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  4036200c541642b23ed991c1b25a2fa4595416f50a97343b6423c62003b87eb8
- Size
  
  225KB
- MD5
  
  76e52ff165c2e1f9a55a715072df093b
- SHA1
  
  24848bbbdab9b669311d35fd3fb7d995afc4bbb5
- SHA256
  
  4036200c541642b23ed991c1b25a2fa4595416f50a97343b6423c62003b87eb8
- SHA512
  
  9a3827174aaa394413d1a288d9df5b15bcf9661620033401b707e71307d1fd18dc7b7effee7f345310b88ec13c31e5337394c56a6652259ff38c37c6041601ac
- SSDEEP
  
  6144:DA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:DATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2