Overview

overview

10

Static

static

7

68d8fb137c...e6.apk

android-9-x86

1

68d8fb137c...e6.apk

android-10-x64

10

68d8fb137c...e6.apk

android-11-x64

10

Analysis

  • max time kernel
    1651380s
  • max time network
    74s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220621-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220621-enlocale:en-usos:android-11-x64system
  • submitted
    03/08/2022, 06:37

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    68d8fb137c13635a33b04eb3ef1ee16431abea526b899fba326a253f5513e8e6.apk
  • Size 2.5MB
  • Sample220803-hdwlpahbgr
  • SHA256 68d8fb137c13635a33b04eb3ef1ee16431abea526b899fba326a253f5513e8e6
  • MD5 SHA1 SHA512
Score
10/10
bratabankerinfostealerransomwarerattrojan

Malware Config

Signatures

  • Brata

    Brata is a banking trojan malware first seen in 2019.

    bankertrojaninfostealerratbrata
  • Brata payload 3 IoCs
  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
    banker
  • Acquires the wake lock. 1 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • th.media.itsme
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
    • Acquires the wake lock.
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4996
    • ls -l /system/bin/su
      2⤵
        PID:7017

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          GF6skLKDGehVcJwMLbVVJANQonMGtfio.dex
          • Path /data/user/0/th.media.itsme/app_ded/GF6skLKDGehVcJwMLbVVJANQonMGtfio.dex
          • Size 3.4MB
          • SHA256 6141628bc091b12b8aa201dc5f0ca39c5faa5cb63d5284685e3949f5df6760b2
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          GF6skLKDGehVcJwMLbVVJANQonMGtfio.dex
          • Path /data/user/0/th.media.itsme/app_ded/GF6skLKDGehVcJwMLbVVJANQonMGtfio.dex
          • Size 3.4MB
          • SHA256 6141628bc091b12b8aa201dc5f0ca39c5faa5cb63d5284685e3949f5df6760b2
          • MD5 SHA1 SHA512 SSDEEP
          Download

          GF6skLKDGehVcJwMLbVVJANQonMGtfio.dex
          • Path /data/user/0/th.media.itsme/app_ded/GF6skLKDGehVcJwMLbVVJANQonMGtfio.dex
          • Size 3.4MB
          • SHA256 6141628bc091b12b8aa201dc5f0ca39c5faa5cb63d5284685e3949f5df6760b2
          • MD5 SHA1 SHA512 SSDEEP
          Download

          ~test.test
          • Path /data/user/0/th.media.itsme/cache/~test.test
          • Size 4B
          • SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
          • MD5 SHA1 SHA512
          Submit Download