Overview

overview

10

Static

static

Android APK

android_x86_64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d942c3d08dfa85df1a6ac89e6e6033eeb0cf87ec2f43ed46f1dbf43df40d2df6

  • Size

    2.7MB

  • Sample

    210319-y1mp9vlzn2

  • MD5

    7799e85be23f5fed2e64d203b4e19e3d

  • SHA1

    4f5c820d05f35b709998df8b32c3709e5f41c9b6

  • SHA256

    d942c3d08dfa85df1a6ac89e6e6033eeb0cf87ec2f43ed46f1dbf43df40d2df6

  • SHA512

    aff1261bb10ea479fd0db9c913b787fbc91195f4d18973e52ac02fa49e4ec8e52c2c8396412ce7b68aa5f46370a3a2f7a38617a454ae4e3ca491ca3d7140c262

Score
10/10
ginpandroidbankerinfostealerobfuscationstealthtrojan

Malware Config

Extracted

Family

ginp

C2

http://fatgoose.top/api201/

http://purefoe.cc/api201/

Targets

    • Target

      d942c3d08dfa85df1a6ac89e6e6033eeb0cf87ec2f43ed46f1dbf43df40d2df6

    • Size

      2.7MB

    • MD5

      7799e85be23f5fed2e64d203b4e19e3d

    • SHA1

      4f5c820d05f35b709998df8b32c3709e5f41c9b6

    • SHA256

      d942c3d08dfa85df1a6ac89e6e6033eeb0cf87ec2f43ed46f1dbf43df40d2df6

    • SHA512

      aff1261bb10ea479fd0db9c913b787fbc91195f4d18973e52ac02fa49e4ec8e52c2c8396412ce7b68aa5f46370a3a2f7a38617a454ae4e3ca491ca3d7140c262

    Score
    10/10
    ginpbankerinfostealerobfuscationstealthtrojan

    • Ginp

      Ginp is an android banking trojan first seen in mid 2019.

      bankertrojaninfostealerginp

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    behavioral1

MITRE ATT&CK Matrix

Tasks