Overview

overview

10

Static

static

Android APK

android_x86_64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    454157fddcd4c4d414d20be52c57b9eb900dee819f426a3a101e3bc4e4aba8e1

  • Size

    3.0MB

  • Sample

    210415-t6134e1wte

  • MD5

    0ee55f288a1f8f9995e2d3c839c43ba4

  • SHA1

    7efafdf39a3c0b07f5b10b21f313cf07ccf599a5

  • SHA256

    454157fddcd4c4d414d20be52c57b9eb900dee819f426a3a101e3bc4e4aba8e1

  • SHA512

    29b41ffb38a9d25fcaca1d237c92a01533c57c24deef74dbbbbce671f710f53ea6211002f5b5390a73abb3cf5a031d8237bf8d8dec40c7974cda900e29c111be

Score
10/10
ginpandroidbankerinfostealerobfuscationstealthtrojan

Malware Config

Extracted

Family

ginp

C2

http://coldcoolcoco.top/api201/

http://jackblack.cc/api201/

http://sweetseventeen.top/api201/

Targets

    • Target

      454157fddcd4c4d414d20be52c57b9eb900dee819f426a3a101e3bc4e4aba8e1

    • Size

      3.0MB

    • MD5

      0ee55f288a1f8f9995e2d3c839c43ba4

    • SHA1

      7efafdf39a3c0b07f5b10b21f313cf07ccf599a5

    • SHA256

      454157fddcd4c4d414d20be52c57b9eb900dee819f426a3a101e3bc4e4aba8e1

    • SHA512

      29b41ffb38a9d25fcaca1d237c92a01533c57c24deef74dbbbbce671f710f53ea6211002f5b5390a73abb3cf5a031d8237bf8d8dec40c7974cda900e29c111be

    Score
    10/10
    ginpbankerinfostealerobfuscationstealthtrojan

    • Ginp

      Ginp is an android banking trojan first seen in mid 2019.

      bankertrojaninfostealerginp

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    behavioral1

MITRE ATT&CK Matrix

Tasks