a98a224b644d3d88eed27aa05548a41e0178dba93ed9145250f61912e924b3e9 | Triage

Resubmissions

21-07-2022 15:40

220721-s4fm9sgdh3 10

20-07-2022 04:45

220720-fdfjcsbhf5 8

20-07-2022 04:01

220720-elmf7sbfa3 8

17-06-2022 11:31

220617-nmpsdsecc7 8

Sharing

General

Target

a98a224b644d3d88eed27aa05548a41e0178dba93ed9145250f61912e924b3e9
Size

1.1MB
Sample

220617-nmpsdsecc7
MD5

6b69a9bf30d76c135db369956774f2cb
SHA1

22f49fa7fe1506d2639f08e9ae198e262396c052
SHA256

a98a224b644d3d88eed27aa05548a41e0178dba93ed9145250f61912e924b3e9
SHA512

2df561ffe8b9d8ce3ab6b1a5b1eccb4312e7230fa20c4da451e76cdb53e94169ffc4b2fbc0a09fe45ca6e5551921ba51670c087b0eb899ccc9206186ec0b83dd

Score

8^/10

android banker evasion

Malware Config

Targets

- Target
  
  a98a224b644d3d88eed27aa05548a41e0178dba93ed9145250f61912e924b3e9
- Size
  
  1.1MB
- MD5
  
  6b69a9bf30d76c135db369956774f2cb
- SHA1
  
  22f49fa7fe1506d2639f08e9ae198e262396c052
- SHA256
  
  a98a224b644d3d88eed27aa05548a41e0178dba93ed9145250f61912e924b3e9
- SHA512
  
  2df561ffe8b9d8ce3ab6b1a5b1eccb4312e7230fa20c4da451e76cdb53e94169ffc4b2fbc0a09fe45ca6e5551921ba51670c087b0eb899ccc9206186ec0b83dd
Score

8^/10

banker evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
  banker
- Requests cell location
  Uses Android APIs to to get current cell location.
- Acquires the wake lock.
- Removes a system notification.
  evasion
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3