d942c3d08dfa85df1a6ac89e6e6033eeb0cf87ec2f43ed46f1dbf43df40d2df6

General
Target

d942c3d08dfa85df1a6ac89e6e6033eeb0cf87ec2f43ed46f1dbf43df40d2df6

Size

2MB

Sample

210319-y1mp9vlzn2

Score
10 /10
MD5

7799e85be23f5fed2e64d203b4e19e3d

SHA1

4f5c820d05f35b709998df8b32c3709e5f41c9b6

SHA256

d942c3d08dfa85df1a6ac89e6e6033eeb0cf87ec2f43ed46f1dbf43df40d2df6

SHA512

aff1261bb10ea479fd0db9c913b787fbc91195f4d18973e52ac02fa49e4ec8e52c2c8396412ce7b68aa5f46370a3a2f7a38617a454ae4e3ca491ca3d7140c262

Malware Config

Extracted

Family ginp
C2

http://fatgoose.top/api201/

http://purefoe.cc/api201/

Targets
Target

d942c3d08dfa85df1a6ac89e6e6033eeb0cf87ec2f43ed46f1dbf43df40d2df6

MD5

7799e85be23f5fed2e64d203b4e19e3d

Filesize

2MB

Score
10 /10
SHA1

4f5c820d05f35b709998df8b32c3709e5f41c9b6

SHA256

d942c3d08dfa85df1a6ac89e6e6033eeb0cf87ec2f43ed46f1dbf43df40d2df6

SHA512

aff1261bb10ea479fd0db9c913b787fbc91195f4d18973e52ac02fa49e4ec8e52c2c8396412ce7b68aa5f46370a3a2f7a38617a454ae4e3ca491ca3d7140c262

Tags

Signatures

  • Ginp

    Description

    Ginp is an android banking trojan first seen in mid 2019.

    Tags

  • Removes its main activity from the application launcher

  • Loads dropped Dex/Jar

    Description

    Runs executable file dropped to the device during analysis.

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks