Overview

overview

10

Static

static

7

3EB7EFA716...54.apk

android-9-x86

1

3EB7EFA716...54.apk

android-10-x64

1

3EB7EFA716...54.apk

android-11-x64

10

Analysis

  • max time kernel
    2432129s
  • max time network
    137s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220621-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220621-enlocale:en-usos:android-11-x64system
  • submitted
    12/08/2022, 07:29

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    3EB7EFA71648AE819F1BFF89399717805129487081E8261DD65BF596F2467054.apk
  • Size 5.2MB
  • Sample220812-ja8yaaadap
  • SHA256 3eb7efa71648ae819f1bff89399717805129487081e8261dd65bf596f2467054
  • MD5 SHA1 SHA512
Score
10/10
malibotbankerinfostealertrojan

Malware Config

Signatures

  • malibot

    Malibot is an Android banking malware with the ability to bypass 2FA/MFA codes.

    infostealertrojanbankermalibot
  • Makes use of the framework's Accessibility service. 1 IoCs
  • Acquires the wake lock. 1 IoCs
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.slhytrowb.wfxaicaiw
    1⤵
    • Makes use of the framework's Accessibility service.
    • Acquires the wake lock.
    • Loads dropped Dex/Jar
    PID:5520

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Cookies
        • Path /data/user/0/com.slhytrowb.wfxaicaiw/app_webview/Default/Cookies
        • Size 64KB
        • SHA256 e4119d32577d7fc63b267cc23eb7a9bbfb12d238f23e08918c38838fe0181224
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Cookies-journal
        • Path /data/user/0/com.slhytrowb.wfxaicaiw/app_webview/Default/Cookies-journal
        • Size 1KB
        • SHA256 71156098b1636ea4b0c6331297f7b74d80fcae0b9e010393e2652bf35abe92fe
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/com.slhytrowb.wfxaicaiw/app_webview/Default/GPUCache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.slhytrowb.wfxaicaiw/app_webview/Default/GPUCache/index-dir/temp-index
        • Size 96B
        • SHA256 3448b0463d0fd37ad59266cefb50ad16f74a8a7ec08df1b76606a6a78aa8df90
        • MD5 SHA1 SHA512
        Submit Download

        Web Data
        • Path /data/user/0/com.slhytrowb.wfxaicaiw/app_webview/Default/Web Data
        • Size 120KB
        • SHA256 8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Web Data-journal
        • Path /data/user/0/com.slhytrowb.wfxaicaiw/app_webview/Default/Web Data-journal
        • Size 2KB
        • SHA256 82e9d1d0118889548d83acb59ab16474b43a31eb70a916c13f7af2488324328b
        • MD5 SHA1 SHA512
        Submit Download

        webview_data.lock
        • Path /data/user/0/com.slhytrowb.wfxaicaiw/app_webview/webview_data.lock
        • Size 29B
        • SHA256 992576746433823b1cfe64625e7613f8966bb07381a7282cef028a843180e21e
        • MD5 SHA1 SHA512
        Submit Download

        settings.dat
        • Path /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Crashpad/settings.dat
        • Size 40B
        • SHA256 4d699784af7c99fb1a04b080dae8957ae0854a8d35af4d6ca9ec8a5edc91d251
        • MD5 SHA1 SHA512
        Submit Download

        2fa35442860d43fc_0
        • Path /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/2fa35442860d43fc_0
        • Size 340B
        • SHA256 fa1e81aabc3cb9e37e34e026fe494848b5819bde99dad9369ff6f07eec956114
        • MD5 SHA1 SHA512
        Submit Download

        9083f7d8c2f97d68_0
        • Path /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/9083f7d8c2f97d68_0
        • Size 338B
        • SHA256 8d3a425e7697c3cf3a9fa6fbbcc582743920b140f43965d539f9ea284a4fb9e0
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/Code Cache/js/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
        • Size 96B
        • SHA256 e78b55fb262884ad657637e5d86931fb3b55874754cef452760eff602390c314
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
        • Size 96B
        • SHA256 f49768cc90962ce689ca90f09720a56be5aa6cbf8b5c3b7b5b7641126826d6f4
        • MD5 SHA1 SHA512
        Submit Download

        fc82c67fb2a675f5_0
        • Path /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/fc82c67fb2a675f5_0
        • Size 520B
        • SHA256 5a3509522297b9aeaf2a9cc62f126e4c1e486ce2fefb74e964254d039a8a5e95
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/index-dir/temp-index
        • Size 144B
        • SHA256 78415fe53cfba17b9c68027da8bd16bcea5ddd9a42bae8648140b2eee16075be
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/index-dir/temp-index
        • Size 96B
        • SHA256 5dd49918fd547fe279bc2a513c21911957864d234c971f046514d144630dc15c
        • MD5 SHA1 SHA512
        Submit Download

        font_unique_name_table.pb
        • Path /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/font_unique_name_table.pb
        • Size 57KB
        • SHA256 0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        WebViewChromiumPrefs.xml
        • Path /data/user/0/com.slhytrowb.wfxaicaiw/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
        • MD5 SHA1 SHA512
        Submit Download