Analysis
- max time kernel
1651353s - max time network
157s - platform
android_x64 - resource
android-x64-20220621-en - resource tags
androidarch:x64arch:x86image:android-x64-20220621-enlocale:en-usos:android-10-x64system - submitted
03/08/2022, 06:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
68d8fb137c13635a33b04eb3ef1ee16431abea526b899fba326a253f5513e8e6.apk
Resource
android-x86-arm-20220621-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
68d8fb137c13635a33b04eb3ef1ee16431abea526b899fba326a253f5513e8e6.apk
Resource
android-x64-20220621-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
68d8fb137c13635a33b04eb3ef1ee16431abea526b899fba326a253f5513e8e6.apk
Resource
android-x64-arm64-20220621-en
6 signatures
150 seconds
General
- Target 68d8fb137c13635a33b04eb3ef1ee16431abea526b899fba326a253f5513e8e6.apk
- Size 2.5MB
- Sample220803-hdwlpahbgr
- SHA256 68d8fb137c13635a33b04eb3ef1ee16431abea526b899fba326a253f5513e8e6
- MD5 0e593549e712398a9f64a4c363601650
- SHA1 4f74b03d330993674607793cf80e985887ad88a7
- SHA512 9e747f9731f8bb43f00152cd5d38c98287bc93431fd97f3d7e6333c967a99029d467849b1e3f6c1350665236a8a85b76c92099d44607b318aca4666bf3fd661e
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- Brata
Brata is a banking trojan malware first seen in 2019.
- Brata payload 3 IoCs
resource yara_rule behavioral2/files/4984-0.dat family_brata2 behavioral2/memory/4984-0.dex family_brata2 behavioral2/memory/4984-1.dex family_brata2 - Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/th.media.itsme/app_ded/83m4VUxoFVcdVnPB8YTEKV89Oyv1St08.dex 4984 th.media.itsme /data/user/0/th.media.itsme/app_ded/83m4VUxoFVcdVnPB8YTEKV89Oyv1St08.dex 4984 th.media.itsme - Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal th.media.itsme
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/th.media.itsme/app_ded/83m4VUxoFVcdVnPB8YTEKV89Oyv1St08.dex
- Size 3.4MB
- SHA256 6141628bc091b12b8aa201dc5f0ca39c5faa5cb63d5284685e3949f5df6760b2
- MD5 38577534635bbb9f5ed68259d6d5cf0c
- SHA1 fbd37abc982c33b706ec7fbdf917017644e3ec16
- SHA512 c0eae597da248fd3c792e8a73c199e5b1ff0c4461b99694cb1013524258f31617649944701096011ebecafb7661d6dd281e5e0058e8066cd092152888e7ea726
- SSDEEP 49152:YjGUVAvmSuaY4OicaiPKIK625wf6ZFElg9lCCJ26m:YjXVWJY4hczK62L9rFm
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/th.media.itsme/app_ded/83m4VUxoFVcdVnPB8YTEKV89Oyv1St08.dex
- Size 3.4MB
- SHA256 6141628bc091b12b8aa201dc5f0ca39c5faa5cb63d5284685e3949f5df6760b2
- MD5 38577534635bbb9f5ed68259d6d5cf0c
- SHA1 fbd37abc982c33b706ec7fbdf917017644e3ec16
- SHA512 c0eae597da248fd3c792e8a73c199e5b1ff0c4461b99694cb1013524258f31617649944701096011ebecafb7661d6dd281e5e0058e8066cd092152888e7ea726
- SSDEEP 49152:YjGUVAvmSuaY4OicaiPKIK625wf6ZFElg9lCCJ26m:YjXVWJY4hczK62L9rFm
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/th.media.itsme/app_ded/83m4VUxoFVcdVnPB8YTEKV89Oyv1St08.dex
- Size 3.4MB
- SHA256 6141628bc091b12b8aa201dc5f0ca39c5faa5cb63d5284685e3949f5df6760b2
- MD5 38577534635bbb9f5ed68259d6d5cf0c
- SHA1 fbd37abc982c33b706ec7fbdf917017644e3ec16
- SHA512 c0eae597da248fd3c792e8a73c199e5b1ff0c4461b99694cb1013524258f31617649944701096011ebecafb7661d6dd281e5e0058e8066cd092152888e7ea726
- SSDEEP 49152:YjGUVAvmSuaY4OicaiPKIK625wf6ZFElg9lCCJ26m:YjXVWJY4hczK62L9rFm
- MD5 SHA1 SHA512 SSDEEP