General

  • Target

    969ebe5f6dc9dc989ccd6a447fbadf550a54ec9b2cb8705796c3fd7f7b971d4d.apk

  • Size

    1.2MB

  • Sample

    211012-x9h3ssdbe9

  • MD5

    a34d28cfc13a8093b900c231cb88cb6f

  • SHA1

    b1686d61b9202dfc405d9f949499ea4620a03254

  • SHA256

    969ebe5f6dc9dc989ccd6a447fbadf550a54ec9b2cb8705796c3fd7f7b971d4d

  • SHA512

    074e8fb8032d4fc17b4d672a4563d996cb30e203371575e2290ab0ab69f7ad347de64979674bd8095aabfe9529fd7f1b55b00a7c928f06a6cb05a2274813c690

Malware Config

Extracted

Family

teabot

C2

http://194.156.99.19:80/api/

Targets

    • Target

      969ebe5f6dc9dc989ccd6a447fbadf550a54ec9b2cb8705796c3fd7f7b971d4d.apk

    • Size

      1.2MB

    • MD5

      a34d28cfc13a8093b900c231cb88cb6f

    • SHA1

      b1686d61b9202dfc405d9f949499ea4620a03254

    • SHA256

      969ebe5f6dc9dc989ccd6a447fbadf550a54ec9b2cb8705796c3fd7f7b971d4d

    • SHA512

      074e8fb8032d4fc17b4d672a4563d996cb30e203371575e2290ab0ab69f7ad347de64979674bd8095aabfe9529fd7f1b55b00a7c928f06a6cb05a2274813c690

    • TeaBot

      TeaBot is an android banker first seen in January 2021.

    • Checks Android system properties for emulator presence.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks