Overview

overview

10

Static

static

8

173a8591dc...in.apk

android_x64

10

Resubmissions

29/09/2021, 15:51

210929-tanbpafcc310

29/09/2021, 15:47

210929-s8e8asfcb68

Sharing

Copy URL Twitter E-mail

General

  • Target
    173a8591dcb43aa7e4b5d0dc5f9034d69aa78bc8827407d56047336614795cce.bin
  • Size 7.0MB
  • Sample210929-tanbpafcc3
  • SHA256 173a8591dcb43aa7e4b5d0dc5f9034d69aa78bc8827407d56047336614795cce
  • MD5 SHA1 SHA512
Score
10/10
sovaandroidbankerinfostealerobfuscationtrojan

Malware Config

Targets

    • Target
      173a8591dcb43aa7e4b5d0dc5f9034d69aa78bc8827407d56047336614795cce.bin
    • Size 7.0MB
    • SHA256 173a8591dcb43aa7e4b5d0dc5f9034d69aa78bc8827407d56047336614795cce
    • MD5 SHA1 SHA512
    Score
    10/10
    sovabankerinfostealerobfuscationtrojan

    • Sova

      Android banker first seen in July 2021.

      bankertrojaninfostealersova

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests enabling of the accessibility settings.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Matrix

Tasks