145957bc018b8d9d78aad0760203e0ca7f70839ba49d7222697072fc0554f842 | Triage™

Resubmissions

11/04/2026, 15:25

260411-stkt8sb12k10

10/11/2020, 19:34

201110-ca2n654epx8

Sharing

Copy URL Twitter E-mail

General

Target
update_4_6_02.apk
Size 2.9MB
Sample201110-ca2n654epx
SHA256 145957bc018b8d9d78aad0760203e0ca7f70839ba49d7222697072fc0554f842
MD5 74c20f197585e34fd12148516a5ef18b
SHA1 dbd284b5882b1db76ccc405ef8b2e686bfd5c37d
SHA512 d1180b17598719f48dc31e67a831bfce641f4d79179829c8fcff62c3857ea7c52cc4961274c1bfa5530c79769b4c5fad2892581f05d5135287396f37b66a0c91
MD5 SHA1 SHA512

Score

8^/10

android banker obfuscation stealth trojan

Malware Config

Targets

- Target
  update_4_6_02.apk
- Size 2.9MB
- SHA256 145957bc018b8d9d78aad0760203e0ca7f70839ba49d7222697072fc0554f842
- MD5 74c20f197585e34fd12148516a5ef18b
- SHA1 dbd284b5882b1db76ccc405ef8b2e686bfd5c37d
- SHA512 d1180b17598719f48dc31e67a831bfce641f4d79179829c8fcff62c3857ea7c52cc4961274c1bfa5530c79769b4c5fad2892581f05d5135287396f37b66a0c91
- MD5 SHA1 SHA512
Score

8^/10

banker obfuscation stealth trojan
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
  banker
- Removes its main activity from the application launcher
  stealth trojan
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
- Reads name of network operator
  Uses Android APIs to discover system information.
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

bankerobfuscationstealthtrojan