Analysis

  • max time kernel
    2240842s
  • max time network
    163s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    21/06/2022, 09:18

General

  • Target
    6d1566ffd1f60ed64b798ca1eea093982c43e1e88c096bc69dd98e0fd5c1c2d1.apk
  • Size 3.4MB
  • Sample220621-k9lsgaehd8
  • SHA256 6d1566ffd1f60ed64b798ca1eea093982c43e1e88c096bc69dd98e0fd5c1c2d1
  • MD5 SHA1 SHA512

Malware Config

Signatures

  • Malibot payload 1 IoCs
  • malibot

    Malibot is an Android banking malware with the ability to bypass 2FA/MFA codes.

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.wjyfqwzhu.fbqipukbm
    1⤵
    • Loads dropped Dex/Jar
    PID:6367

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        base.apk.j6jU8Ug1.gdf

        • Path /data/user/0/com.wjyfqwzhu.fbqipukbm/GFqufipowG/8gG8oI6y8gkhugg/base.apk.j6jU8Ug1.gdf
        • Size 495KB
        • SHA256 4cae15ba01d4a21bcd4ce7a390cd58fd8a325c19ee9069adcc474b97d186535e
        • MD5 SHA1 SHA512 SSDEEP

        multidex.version.xml

        • Path /data/user/0/com.wjyfqwzhu.fbqipukbm/shared_prefs/multidex.version.xml
        • Size 307B
        • SHA256 40652b7c2e50ac34bf147a328bfb69df0360c367465d71e5269927c00bc5ea99
        • MD5 SHA1 SHA512