Overview

overview

8

Static

static

7

243ea96b2f...6e.apk

android_x86

8

243ea96b2f...6e.apk

android_x64

6

Resubmissions

21-07-2022 15:41

220721-s4qhgaghgk 10

20-07-2022 04:03

220720-emcndscbgn 8

17-06-2022 11:30

220617-nl5gfsbgfl 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    243ea96b2f8f70abc127c8bc1759929e3ad9efc1dec5b51f5788e9896b6d516e

  • Size

    2.9MB

  • Sample

    220617-nl5gfsbgfl

  • MD5

    5d892168472ed4a87a60721c02330f15

  • SHA1

    97ead8dec0bf601ba452b9e45bb33cb4a3bf830f

  • SHA256

    243ea96b2f8f70abc127c8bc1759929e3ad9efc1dec5b51f5788e9896b6d516e

  • SHA512

    e8aa2aecbde4c0385b5027a0920cb4dd3d19267e2ef2155f74d8b90425697c7a5421f31a3d12ee5f6fb904ad82514c9de7f2d1e7d53e43f50aa2b179434ec60a

Score
8/10
androidbankerevasionransomware

Malware Config

Targets

    • Target

      243ea96b2f8f70abc127c8bc1759929e3ad9efc1dec5b51f5788e9896b6d516e

    • Size

      2.9MB

    • MD5

      5d892168472ed4a87a60721c02330f15

    • SHA1

      97ead8dec0bf601ba452b9e45bb33cb4a3bf830f

    • SHA256

      243ea96b2f8f70abc127c8bc1759929e3ad9efc1dec5b51f5788e9896b6d516e

    • SHA512

      e8aa2aecbde4c0385b5027a0920cb4dd3d19267e2ef2155f74d8b90425697c7a5421f31a3d12ee5f6fb904ad82514c9de7f2d1e7d53e43f50aa2b179434ec60a

    Score
    8/10
    bankerevasionransomware

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).

      banker

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Removes a system notification.

      evasion

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks