General

  • Target

    ee879cce3d324b931a22b3a1c6125cf79dbda69b1837f59098e006ee0454210f.apk

  • Size

    3.7MB

  • Sample

    211116-p3bq5saghr

  • MD5

    acb036a888fecabd5fc62e41b47a0eaa

  • SHA1

    3020ffed5b6efb8dd92e8d2b404dc2cd0b83b0c3

  • SHA256

    ee879cce3d324b931a22b3a1c6125cf79dbda69b1837f59098e006ee0454210f

  • SHA512

    fbdc2829c6bc0c2de1a34e7530c9f132b402a99bb3d2dd3d26e2306e95c771637dc9cf820469fbde648c88ab5dc439a1da1d3372bb10e780710f059916f788bf

Malware Config

Extracted

Family

teabot

C2

http://138.201.211.36:84/api/

Targets

    • Target

      ee879cce3d324b931a22b3a1c6125cf79dbda69b1837f59098e006ee0454210f.apk

    • Size

      3.7MB

    • MD5

      acb036a888fecabd5fc62e41b47a0eaa

    • SHA1

      3020ffed5b6efb8dd92e8d2b404dc2cd0b83b0c3

    • SHA256

      ee879cce3d324b931a22b3a1c6125cf79dbda69b1837f59098e006ee0454210f

    • SHA512

      fbdc2829c6bc0c2de1a34e7530c9f132b402a99bb3d2dd3d26e2306e95c771637dc9cf820469fbde648c88ab5dc439a1da1d3372bb10e780710f059916f788bf

    • TeaBot

      TeaBot is an android banker first seen in January 2021.

    • TeaBot Payload

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks