Overview

overview

10

Static

static

8

Android APK

android_x64

10

Resubmissions

14/02/2024, 07:37

240214-jfx3zaea4210

10/09/2021, 11:39

210910-nsawesdbcl8

Sharing

Copy URL Twitter E-mail

General

  • Target
    dd8a5a1a8632d661f152f435b7afba825e474ec0d03d1c5ef8669fdc2b484165.apk
  • Size 2.9MB
  • Sample210910-nsawesdbcl
  • SHA256 dd8a5a1a8632d661f152f435b7afba825e474ec0d03d1c5ef8669fdc2b484165
  • MD5 SHA1 SHA512
Score
10/10
sovaandroidbankerinfostealerobfuscationtrojan

Malware Config

Targets

    • Target
      dd8a5a1a8632d661f152f435b7afba825e474ec0d03d1c5ef8669fdc2b484165.apk
    • Size 2.9MB
    • SHA256 dd8a5a1a8632d661f152f435b7afba825e474ec0d03d1c5ef8669fdc2b484165
    • MD5 SHA1 SHA512
    Score
    10/10
    sovabankerinfostealerobfuscationtrojan

    • Sova

      Android banker first seen in July 2021.

      bankertrojaninfostealersova

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests enabling of the accessibility settings.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Matrix

Tasks