Analysis

  • max time kernel
    1651353s
  • max time network
    157s
  • platform
    android_x64
  • resource
    android-x64-20220621-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220621-enlocale:en-usos:android-10-x64system
  • submitted
    03/08/2022, 06:37

General

  • Target
    68d8fb137c13635a33b04eb3ef1ee16431abea526b899fba326a253f5513e8e6.apk
  • Size 2.5MB
  • Sample220803-hdwlpahbgr
  • SHA256 68d8fb137c13635a33b04eb3ef1ee16431abea526b899fba326a253f5513e8e6
  • MD5 SHA1 SHA512

Malware Config

Signatures

  • Brata

    Brata is a banking trojan malware first seen in 2019.

  • Brata payload 3 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • th.media.itsme
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4984

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        83m4VUxoFVcdVnPB8YTEKV89Oyv1St08.dex

        • Path /data/user/0/th.media.itsme/app_ded/83m4VUxoFVcdVnPB8YTEKV89Oyv1St08.dex
        • Size 3.4MB
        • SHA256 6141628bc091b12b8aa201dc5f0ca39c5faa5cb63d5284685e3949f5df6760b2
        • MD5 SHA1 SHA512 SSDEEP

        83m4VUxoFVcdVnPB8YTEKV89Oyv1St08.dex

        • Path /data/user/0/th.media.itsme/app_ded/83m4VUxoFVcdVnPB8YTEKV89Oyv1St08.dex
        • Size 3.4MB
        • SHA256 6141628bc091b12b8aa201dc5f0ca39c5faa5cb63d5284685e3949f5df6760b2
        • MD5 SHA1 SHA512 SSDEEP

        83m4VUxoFVcdVnPB8YTEKV89Oyv1St08.dex

        • Path /data/user/0/th.media.itsme/app_ded/83m4VUxoFVcdVnPB8YTEKV89Oyv1St08.dex
        • Size 3.4MB
        • SHA256 6141628bc091b12b8aa201dc5f0ca39c5faa5cb63d5284685e3949f5df6760b2
        • MD5 SHA1 SHA512 SSDEEP