Overview

overview

10

Static

static

8

Android APK

android_x64

10

Resubmissions

14-07-2021 08:41

210714-fgrckbxfba 10

14-07-2021 08:36

210714-gyyarmy24e 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    63e84320b46ae16e1830079a7d9fc74a0c4573db46e65485d2c1dac85f066818.apk

  • Size

    3.7MB

  • Sample

    210714-fgrckbxfba

  • MD5

    abfaf9c4bc8f982c74f3ccad96fa8f04

  • SHA1

    e60576b1283818faf3ef41c6ed0c36ccc5780783

  • SHA256

    63e84320b46ae16e1830079a7d9fc74a0c4573db46e65485d2c1dac85f066818

  • SHA512

    5363e507deba301f101624170ded0ce6f4fbf071534203b0f8d3de9b098ff7f2e802571d567aa51381c41ea0e0edf762c7eb5addb35bbf0a2980bc7f8033c53a

Score
10/10
teabotandroidbankerinfostealerobfuscationtrojan

Malware Config

Extracted

Family

teabot

C2

http://178.32.130.175:84/api/

Targets

    • Target

      63e84320b46ae16e1830079a7d9fc74a0c4573db46e65485d2c1dac85f066818.apk

    • Size

      3.7MB

    • MD5

      abfaf9c4bc8f982c74f3ccad96fa8f04

    • SHA1

      e60576b1283818faf3ef41c6ed0c36ccc5780783

    • SHA256

      63e84320b46ae16e1830079a7d9fc74a0c4573db46e65485d2c1dac85f066818

    • SHA512

      5363e507deba301f101624170ded0ce6f4fbf071534203b0f8d3de9b098ff7f2e802571d567aa51381c41ea0e0edf762c7eb5addb35bbf0a2980bc7f8033c53a

    Score
    10/10
    teabotbankerinfostealerobfuscationtrojan

    • TeaBot

      TeaBot is an android banker first seen in January 2021.

      bankertrojaninfostealerteabot

    • TeaBot Payload

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests enabling of the accessibility settings.

    behavioral1

MITRE ATT&CK Matrix

Tasks