Analysis
-
max time kernel
862378s -
max time network
209s -
platform
android_x64 -
resource
android-x64 -
submitted
18-11-2021 14:11
Static task
static1
Behavioral task
behavioral1
Sample
fb47b9f3bb69e54cab0470e78ee6c02f83b431e2cf8390710c1f3ea4277dcf36.apk
Resource
android-x64
General
-
Target
fb47b9f3bb69e54cab0470e78ee6c02f83b431e2cf8390710c1f3ea4277dcf36.apk
-
Size
4.2MB
-
MD5
84e1f4cff529c8c5324f8a9075f15bb6
-
SHA1
c7acde8b3f12775a6b98230531d10a2a7ce8a40c
-
SHA256
fb47b9f3bb69e54cab0470e78ee6c02f83b431e2cf8390710c1f3ea4277dcf36
-
SHA512
80e206d92eaee41579fbe869a53ae94d736c73823e0f423a3f47d521f9a8ac1de702821c4cfb0ced3afa21c03c68eb062cda64613631e04676d361781a6c25ed
Malware Config
Signatures
-
TeaBot
TeaBot is an android banker first seen in January 2021.
-
TeaBot Payload 2 IoCs
Processes:
resource yara_rule /data/user/0/rate.glory.athlete/app_DynamicOptDex/usdDoYu.json family_teabot /data/user/0/rate.glory.athlete/app_DynamicOptDex/usdDoYu.json family_teabot -
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
Processes:
rate.glory.athleteioc pid process /data/user/0/rate.glory.athlete/app_DynamicOptDex/usdDoYu.json 3677 rate.glory.athlete /data/user/0/rate.glory.athlete/app_DynamicOptDex/usdDoYu.json 3677 rate.glory.athlete
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
MD5
e88f6fca50da22c244d9378a5a7c6449
SHA19275df9dc96ff38191a473b825c403d025a1a096
SHA25622011e48e69f004c9d68bf2ca9ef2eb4c440bac617e1c261873a00e645512eeb
SHA512d1a27ff6cb631396e557d935f543d776c2bb89bac096825998da1fce595668ef87885cebb52947c1b2b4d41d68266a9342e044fca33f2b61f1c67c9ce4f04361
-
MD5
e88f6fca50da22c244d9378a5a7c6449
SHA19275df9dc96ff38191a473b825c403d025a1a096
SHA25622011e48e69f004c9d68bf2ca9ef2eb4c440bac617e1c261873a00e645512eeb
SHA512d1a27ff6cb631396e557d935f543d776c2bb89bac096825998da1fce595668ef87885cebb52947c1b2b4d41d68266a9342e044fca33f2b61f1c67c9ce4f04361