Resubmissions

03/08/2022, 12:07

220803-paebkabhhp7

03/08/2022, 12:02

220803-n7xnqsbhfq10

03/08/2022, 11:31

220803-nmtrcabfgn10

Analysis

  • max time kernel
    1669039s
  • max time network
    163s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220621-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220621-enlocale:en-usos:android-11-x64system
  • submitted
    03/08/2022, 11:31

General

  • Target
    GRUPPOBPER.apk
  • Size 2.8MB
  • Sample220803-nmtrcabfgn
  • SHA256 0e476e773db665f61476aa552942feaa659253a37400431f18bcde9f7859a45a
  • MD5 SHA1 SHA512

Malware Config

Signatures

  • Brata

    Brata is a banking trojan malware first seen in 2019.

  • Brata payload 6 IoCs
  • Makes use of the framework's Accessibility service. 1 IoCs
  • Acquires the wake lock. 1 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.textmeinc.textme
    1⤵
    • Makes use of the framework's Accessibility service.
    • Acquires the wake lock.
    • Loads dropped Dex/Jar
    PID:4850

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        nnkyVs0ID6GxApiJgXC0u2Upxmx7DmoX.dex

        • Path /data/user/0/com.textmeinc.textme/app_ded/nnkyVs0ID6GxApiJgXC0u2Upxmx7DmoX.dex
        • Size 3.8MB
        • SHA256 b6b3157f89f94ec5602b4fd76de4f8524a76c2921e2991d0489c88421539ffd4
        • MD5 SHA1 SHA512 SSDEEP

        nnkyVs0ID6GxApiJgXC0u2Upxmx7DmoX.dex

        • Path /data/user/0/com.textmeinc.textme/app_ded/nnkyVs0ID6GxApiJgXC0u2Upxmx7DmoX.dex
        • Size 3.8MB
        • SHA256 b6b3157f89f94ec5602b4fd76de4f8524a76c2921e2991d0489c88421539ffd4
        • MD5 SHA1 SHA512 SSDEEP

        nnkyVs0ID6GxApiJgXC0u2Upxmx7DmoX.dex

        • Path /data/user/0/com.textmeinc.textme/app_ded/nnkyVs0ID6GxApiJgXC0u2Upxmx7DmoX.dex
        • Size 3.8MB
        • SHA256 b6b3157f89f94ec5602b4fd76de4f8524a76c2921e2991d0489c88421539ffd4
        • MD5 SHA1 SHA512 SSDEEP

        _trv

        • Path /data/user/0/com.textmeinc.textme/files/_trv
        • Size 12B
        • SHA256 dacfe86fd73d7f9ff41e66a923211c722392d0fa0b838b9a6bfcb0d0e45379d4
        • MD5 SHA1 SHA512

        a11y

        • Path /data/user/0/com.textmeinc.textme/files/a11y
        • Size 8B
        • SHA256 cde0fb0dec1400c54a0f7e7eafa73624c53e4da258bbd34b3380a0defeba95c1
        • MD5 SHA1 SHA512