Resubmissions
03/08/2022, 12:07
220803-paebkabhhp703/08/2022, 12:02
220803-n7xnqsbhfq1003/08/2022, 11:31
220803-nmtrcabfgn10Analysis
- max time kernel
1669039s - max time network
163s - platform
android_x64 - resource
android-x64-arm64-20220621-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220621-enlocale:en-usos:android-11-x64system - submitted
03/08/2022, 11:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GRUPPOBPER.apk
Resource
android-x86-arm-20220621-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
GRUPPOBPER.apk
Resource
android-x64-20220621-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
GRUPPOBPER.apk
Resource
android-x64-arm64-20220621-en
5 signatures
150 seconds
General
- Target GRUPPOBPER.apk
- Size 2.8MB
- Sample220803-nmtrcabfgn
- SHA256 0e476e773db665f61476aa552942feaa659253a37400431f18bcde9f7859a45a
- MD5 41543657536461b8765e733fd1ddfe75
- SHA1 52c7099f34ff4e295afeb8f13e8c24b7a1fa5c50
- SHA512 c9f83e17779a83bd625df6423e3f842f84a5e24b08036cbb2019f39d62be31730f726bf29132bea778d60b032006c1eed6f33a68ca4f7387f352e0dee49e9105
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- Brata
Brata is a banking trojan malware first seen in 2019.
- Brata payload 6 IoCs
resource yara_rule behavioral3/files/4850-0.dat family_brata2 behavioral3/files/4850-0.dat family_brata3 behavioral3/memory/4850-0.dex family_brata2 behavioral3/memory/4850-0.dex family_brata3 behavioral3/memory/4850-1.dex family_brata2 behavioral3/memory/4850-1.dex family_brata3 - Makes use of the framework's Accessibility service. 1 IoCs
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.textmeinc.textme - Acquires the wake lock. 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.textmeinc.textme - Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.textmeinc.textme/app_ded/nnkyVs0ID6GxApiJgXC0u2Upxmx7DmoX.dex 4850 com.textmeinc.textme /data/user/0/com.textmeinc.textme/app_ded/nnkyVs0ID6GxApiJgXC0u2Upxmx7DmoX.dex 4850 com.textmeinc.textme
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.textmeinc.textme/app_ded/nnkyVs0ID6GxApiJgXC0u2Upxmx7DmoX.dex
- Size 3.8MB
- SHA256 b6b3157f89f94ec5602b4fd76de4f8524a76c2921e2991d0489c88421539ffd4
- MD5 0717f3c5f1b44c7dedb88d9ee7a50cb1
- SHA1 061bfbcf650659267beb6d0b4136044852fca103
- SHA512 dc9b1c924e8624a0ec5c1319a5e317fc1daa42c0e1106d657166fd9bf53106d3307d944b3ad84bcdc623c5239cbd02f62bcc11762c1efbaf43ba9af907f0ddb6
- SSDEEP 24576:w9i/qAY/d2MAP8otsEqiZCAz912h3afZbKCBL4XAXQXUX0bFdXFTeRIKs1dO91Kt:ai/WdK7zz4jK620bF941OhLXm8KFfPsp
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.textmeinc.textme/app_ded/nnkyVs0ID6GxApiJgXC0u2Upxmx7DmoX.dex
- Size 3.8MB
- SHA256 b6b3157f89f94ec5602b4fd76de4f8524a76c2921e2991d0489c88421539ffd4
- MD5 0717f3c5f1b44c7dedb88d9ee7a50cb1
- SHA1 061bfbcf650659267beb6d0b4136044852fca103
- SHA512 dc9b1c924e8624a0ec5c1319a5e317fc1daa42c0e1106d657166fd9bf53106d3307d944b3ad84bcdc623c5239cbd02f62bcc11762c1efbaf43ba9af907f0ddb6
- SSDEEP 24576:w9i/qAY/d2MAP8otsEqiZCAz912h3afZbKCBL4XAXQXUX0bFdXFTeRIKs1dO91Kt:ai/WdK7zz4jK620bF941OhLXm8KFfPsp
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.textmeinc.textme/app_ded/nnkyVs0ID6GxApiJgXC0u2Upxmx7DmoX.dex
- Size 3.8MB
- SHA256 b6b3157f89f94ec5602b4fd76de4f8524a76c2921e2991d0489c88421539ffd4
- MD5 0717f3c5f1b44c7dedb88d9ee7a50cb1
- SHA1 061bfbcf650659267beb6d0b4136044852fca103
- SHA512 dc9b1c924e8624a0ec5c1319a5e317fc1daa42c0e1106d657166fd9bf53106d3307d944b3ad84bcdc623c5239cbd02f62bcc11762c1efbaf43ba9af907f0ddb6
- SSDEEP 24576:w9i/qAY/d2MAP8otsEqiZCAz912h3afZbKCBL4XAXQXUX0bFdXFTeRIKs1dO91Kt:ai/WdK7zz4jK620bF941OhLXm8KFfPsp
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.textmeinc.textme/files/_trv
- Size 12B
- SHA256 dacfe86fd73d7f9ff41e66a923211c722392d0fa0b838b9a6bfcb0d0e45379d4
- MD5 abdbb534c848c7edfb4a407c25b29902
- SHA1 62380bdc3037cb5df6c3fb780aaf53073506ba31
- SHA512 506edaee43849f8ee043930f13b45f53b80d783bb9fa1b9393fe32e0ddea61f5cb31a57d4d1b811a0d2fc6d15dcc0a8f7b1aedd288af328e032ed25884c14bbd
- MD5 SHA1 SHA512
- Path /data/user/0/com.textmeinc.textme/files/a11y
- Size 8B
- SHA256 cde0fb0dec1400c54a0f7e7eafa73624c53e4da258bbd34b3380a0defeba95c1
- MD5 2e5d8aa3dfa8ef34ca5131d20f9dad51
- SHA1 3cc1d5a427a45820b04fe30f78a972b784952460
- SHA512 a0527c1de9df8c529337f73be73cf98fcde155fcf00c7522f67a4a6298b52853d9767815d8811c2a7e5e829871a5dea9174b2b7e90fb7c98a62467240dd78434
- MD5 SHA1 SHA512