Analysis

  • max time kernel
    862378s
  • max time network
    209s
  • platform
    android_x64
  • resource
    android-x64
  • submitted
    18-11-2021 14:11

General

  • Target

    fb47b9f3bb69e54cab0470e78ee6c02f83b431e2cf8390710c1f3ea4277dcf36.apk

  • Size

    4.2MB

  • MD5

    84e1f4cff529c8c5324f8a9075f15bb6

  • SHA1

    c7acde8b3f12775a6b98230531d10a2a7ce8a40c

  • SHA256

    fb47b9f3bb69e54cab0470e78ee6c02f83b431e2cf8390710c1f3ea4277dcf36

  • SHA512

    80e206d92eaee41579fbe869a53ae94d736c73823e0f423a3f47d521f9a8ac1de702821c4cfb0ced3afa21c03c68eb062cda64613631e04676d361781a6c25ed

Malware Config

Signatures

  • TeaBot

    TeaBot is an android banker first seen in January 2021.

  • TeaBot Payload 2 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • rate.glory.athlete
    1⤵
    • Loads dropped Dex/Jar
    PID:3677

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/rate.glory.athlete/app_DynamicOptDex/usdDoYu.json

    MD5

    e88f6fca50da22c244d9378a5a7c6449

    SHA1

    9275df9dc96ff38191a473b825c403d025a1a096

    SHA256

    22011e48e69f004c9d68bf2ca9ef2eb4c440bac617e1c261873a00e645512eeb

    SHA512

    d1a27ff6cb631396e557d935f543d776c2bb89bac096825998da1fce595668ef87885cebb52947c1b2b4d41d68266a9342e044fca33f2b61f1c67c9ce4f04361

  • /data/user/0/rate.glory.athlete/app_DynamicOptDex/usdDoYu.json

    MD5

    e88f6fca50da22c244d9378a5a7c6449

    SHA1

    9275df9dc96ff38191a473b825c403d025a1a096

    SHA256

    22011e48e69f004c9d68bf2ca9ef2eb4c440bac617e1c261873a00e645512eeb

    SHA512

    d1a27ff6cb631396e557d935f543d776c2bb89bac096825998da1fce595668ef87885cebb52947c1b2b4d41d68266a9342e044fca33f2b61f1c67c9ce4f04361