Overview

overview

10

Static

static

7

ndQOhY0ypd.apk

android-10-x64

10

ndQOhY0ypd.apk

android-11-x64

10

Resubmissions

13-10-2022 15:48

221013-s89f5sbhen 10

06-10-2022 16:41

221006-t7h38sacan 10

05-10-2022 13:53

221005-q667wseeb2 10

31-08-2022 20:23

220831-y6g7rsdba5 10

31-08-2022 20:11

220831-yykb6abbdk 10

31-08-2022 19:40

220831-ydqy7sagfk 10

31-08-2022 17:36

220831-v6tzsahdgm 10

31-08-2022 17:32

220831-v4htqshddn 7

Analysis

  • max time kernel
    4121864s
  • max time network
    1798s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    31-08-2022 20:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ndQOhY0ypd.apk

  • Size

    5.2MB

  • MD5

    ca559118f4605b0316a13b8cfa321f65

  • SHA1

    5ef4d5784738d79f22f9bc5e8db7c94985bc1a3a

  • SHA256

    3eb7efa71648ae819f1bff89399717805129487081e8261dd65bf596f2467054

  • SHA512

    091f07d51e9d7c924666f28a30b03e5ff887e239ad2ed9a99cbd65e7b9350c6fc89cafdbbe05de27f8ea6dc90ff8484c1b692fc891b58fcc6104fa6878e8f3d7

  • SSDEEP

    98304:+Ld3yR0X7GPzP21DeReIrJ0jJMooanGHNdyc7scnuB5k9MWdU:+LxyR0X7Qz/diMolGfyXcNMWdU

Score
10/10
malibotbankerinfostealertrojan

Malware Config

Signatures

  • Malibot payload 1 IoCs
  • malibot

    Malibot is an Android banking malware with the ability to bypass 2FA/MFA codes.

    infostealertrojanbankermalibot
  • Makes use of the framework's Accessibility service. 1 IoCs
  • Acquires the wake lock. 1 IoCs
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.slhytrowb.wfxaicaiw
    1⤵
    • Makes use of the framework's Accessibility service.
    • Acquires the wake lock.
    • Loads dropped Dex/Jar
    PID:4647

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.slhytrowb.wfxaicaiw/app_webview/Default/Cookies
    Filesize

    64KB

    MD5

    dfb2098ca7b3bf16d6f5f1e7d3839af5

    SHA1

    ebb7a8bc886062d77a4092bd306b77a0ce7a3e9d

    SHA256

    e4119d32577d7fc63b267cc23eb7a9bbfb12d238f23e08918c38838fe0181224

    SHA512

    fccec45399258eb98220b7f01b492a72b8b3d1254dec6e196e344d89a0376c6ee24534a31a6675c866d4a17256d3ac6823657eaf04e1d386757d0cbfc6597e50

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/app_webview/Default/Cookies-journal
    Filesize

    1KB

    MD5

    ec5174952539c454cb4049c329f595a2

    SHA1

    65b96e0687a9ae338f042847b0b6013868f821e1

    SHA256

    3d87a18ab2b32be886d6d69f96541fbe1e3632c7cc7a41c7de8ec45404b60436

    SHA512

    0ad751e31728a6ff11b2215446359f5c65ec81d1f1f4ee17b073fb19cb15a8dde67d8732659cb22875a1e0cadc4cbd54cc36e01986989b9fc31ad0e88c19ef35

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/app_webview/Default/GPUCache/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/app_webview/Default/GPUCache/index-dir/temp-index
    Filesize

    96B

    MD5

    37b3471c52359954e885d97d0ca403dc

    SHA1

    95652fc4036337224e862da5c7df3e3c5d281bd3

    SHA256

    9013e9e617f81673eff823918f61cb41a677acbf503f06f8cf00b66f9f2b478b

    SHA512

    5d65180b9979928a4909fe3a398a91f09abce8da516f63a0b3870888e4ccaeea5c46f4a129bb44b33308cb98b5ba2752031f5d10ed40ece1a7b55dcf0774a019

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/app_webview/Default/Web Data
    Filesize

    120KB

    MD5

    a48cd9324b1f8754b07f00d863b840f3

    SHA1

    11c6614775b35a58f440971dfc87c8aaac6d6173

    SHA256

    8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

    SHA512

    35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/app_webview/Default/Web Data-journal
    Filesize

    2KB

    MD5

    169784c4cfa6cd092abdc5b209f20aa9

    SHA1

    e6ca2248a1dc0b2f9272b9e36812c84e38f2e123

    SHA256

    209e38f8e45c32e3950cdc4b76f33ea2c6c706dcb31709b51b7ee5cfdb7c36d7

    SHA512

    a977ed9a61311cbbd1a11ee6e8ea5cfa7b9fdd8480ee3657ba609d96ad6a52e34210ae85cbece93844a9db4c9a95510eafeee5515bb8b938e84e13e46a5c6656

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/app_webview/webview_data.lock
    Filesize

    29B

    MD5

    18904d75915a074c133781be09531f6e

    SHA1

    94fbcdb5817ee3b5a8661676bb936573b1a9379b

    SHA256

    ae5510ffe25f64ca0ecde98d3a22d51b9c9f2c6242088ea9851bf80d0e3a6a47

    SHA512

    21a04d729f11b2896ce97656a107dbdc16e3d82ecdcb3d4769440ef94a78949d6b137f2404c11fda0227242cd11b7262a50dc479a78b816a7d0777127da9620d

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Crashpad/settings.dat
    Filesize

    40B

    MD5

    4af62d31fa1cc30123569ad746550819

    SHA1

    5bc929c14ffec6a4290d8540e060933b09b0e95a

    SHA256

    a9a0010bcb16db4d9390db37271682985fa124978c4f52b6a1878a6727162e59

    SHA512

    8f178523e49fd64133be6de4cf5e80f71be0f1567c09e86bd2b5fbd4fd8e4dddf7482d11c024e8467d3f7a4ae3c863b4ccb40228119b74972c7baa0917788cf7

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/34dd37a88d836e5a_0
    Filesize

    338B

    MD5

    410804548bff6c6a723cce37af8c4a4c

    SHA1

    e595b9812dc186e4655e18bb41a47c951d0ecd5e

    SHA256

    016a2f54ae560aeb60cdf6f66a86f29f63a33aee2247c092fd00e4fdf0e5ca3b

    SHA512

    28ea106cb35bdb2f4a215e716d250df13a1f9d7aafd7595e803590fd766c3d0dccc2ba11b9c36712ad29e41c16bd9aead0d80c1864121364beb600c74b835385

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/34dd37a88d836e5a_0
    Filesize

    338B

    MD5

    410804548bff6c6a723cce37af8c4a4c

    SHA1

    e595b9812dc186e4655e18bb41a47c951d0ecd5e

    SHA256

    016a2f54ae560aeb60cdf6f66a86f29f63a33aee2247c092fd00e4fdf0e5ca3b

    SHA512

    28ea106cb35bdb2f4a215e716d250df13a1f9d7aafd7595e803590fd766c3d0dccc2ba11b9c36712ad29e41c16bd9aead0d80c1864121364beb600c74b835385

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/34dd37a88d836e5a_0
    Filesize

    338B

    MD5

    410804548bff6c6a723cce37af8c4a4c

    SHA1

    e595b9812dc186e4655e18bb41a47c951d0ecd5e

    SHA256

    016a2f54ae560aeb60cdf6f66a86f29f63a33aee2247c092fd00e4fdf0e5ca3b

    SHA512

    28ea106cb35bdb2f4a215e716d250df13a1f9d7aafd7595e803590fd766c3d0dccc2ba11b9c36712ad29e41c16bd9aead0d80c1864121364beb600c74b835385

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/34dd37a88d836e5a_0
    Filesize

    338B

    MD5

    410804548bff6c6a723cce37af8c4a4c

    SHA1

    e595b9812dc186e4655e18bb41a47c951d0ecd5e

    SHA256

    016a2f54ae560aeb60cdf6f66a86f29f63a33aee2247c092fd00e4fdf0e5ca3b

    SHA512

    28ea106cb35bdb2f4a215e716d250df13a1f9d7aafd7595e803590fd766c3d0dccc2ba11b9c36712ad29e41c16bd9aead0d80c1864121364beb600c74b835385

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/34dd37a88d836e5a_0
    Filesize

    338B

    MD5

    410804548bff6c6a723cce37af8c4a4c

    SHA1

    e595b9812dc186e4655e18bb41a47c951d0ecd5e

    SHA256

    016a2f54ae560aeb60cdf6f66a86f29f63a33aee2247c092fd00e4fdf0e5ca3b

    SHA512

    28ea106cb35bdb2f4a215e716d250df13a1f9d7aafd7595e803590fd766c3d0dccc2ba11b9c36712ad29e41c16bd9aead0d80c1864121364beb600c74b835385

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/34dd37a88d836e5a_0
    Filesize

    338B

    MD5

    410804548bff6c6a723cce37af8c4a4c

    SHA1

    e595b9812dc186e4655e18bb41a47c951d0ecd5e

    SHA256

    016a2f54ae560aeb60cdf6f66a86f29f63a33aee2247c092fd00e4fdf0e5ca3b

    SHA512

    28ea106cb35bdb2f4a215e716d250df13a1f9d7aafd7595e803590fd766c3d0dccc2ba11b9c36712ad29e41c16bd9aead0d80c1864121364beb600c74b835385

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/34dd37a88d836e5a_0
    Filesize

    338B

    MD5

    410804548bff6c6a723cce37af8c4a4c

    SHA1

    e595b9812dc186e4655e18bb41a47c951d0ecd5e

    SHA256

    016a2f54ae560aeb60cdf6f66a86f29f63a33aee2247c092fd00e4fdf0e5ca3b

    SHA512

    28ea106cb35bdb2f4a215e716d250df13a1f9d7aafd7595e803590fd766c3d0dccc2ba11b9c36712ad29e41c16bd9aead0d80c1864121364beb600c74b835385

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/6e9739198c241f7d_0
    Filesize

    520B

    MD5

    40400ac69e7f3fa9a36a392772b4f517

    SHA1

    2e5ee597b5ce48d201cc62cafb103e1193d4b9b9

    SHA256

    ffe58c8a3f6309820d8235e74c6fbcd5813c385f848cf03c031cca2ecc691a90

    SHA512

    8d80131a81f916c07411f925158ec14f31ba70ed5c3e155ce9937ae60a620ebba2ddc6e96f2c7390d45164ea1543f51c2edbd61011547ebb2c0e7d0b58d232ea

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/Code Cache/js/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
    Filesize

    96B

    MD5

    ad97d30cb1b9d774a361ce0159b4675c

    SHA1

    13559ad45bf18210930d03667cc3fc5a1991731d

    SHA256

    9a4f222b72b3f4a7463bd9aee8e8598070fd460c9fd4c27168e285ef4a656b8c

    SHA512

    27212f03f4c589767f646944118a5f9d3ae3a408bd869d5cef4624470cca784b2bb9b80d427e3d87f74ce11ae166327aa446d9a7e06546c58d49355a14010b45

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
    Filesize

    96B

    MD5

    d6fedbec0b8994f0bbc915e533e384df

    SHA1

    7ba5af224e0f2f7c23804633eca2f2f1aad584af

    SHA256

    a8a142146a0611f1a46a037a8f3e53e44b0e4835f650413c0beb08435dddb483

    SHA512

    ff1a735dc5ac61c6e3ce17fc3b12d9c5b2cca782c0710d1fe054a3911c81085d11198f7d5859feb51a7505a2aa98af50fcc5f9154403cf0af54aef426baa4109

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/ec384f68bcbe9b61_0
    Filesize

    340B

    MD5

    53c748b8d3078e77ba2255d6ca2bd047

    SHA1

    6c6d53aea5f4eb4a34653b0ecd8a4daeb0563c40

    SHA256

    3758f4b77fa21acd115ad8711d41320735d07c5b4d4363970444ac9f423a480a

    SHA512

    b8efc7d6a1e61490dc9515293ca2a7ae28d125dd447ff8b0d8f1e08f2da889148df4f85560316932f41841d014f27a7a7d733d60a344edec90050d96e806853a

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/index-dir/temp-index
    Filesize

    144B

    MD5

    0b53cdccc28ca88af8736a23f0b30e37

    SHA1

    1dba5d034aa6846c42bba3618d1c7a8d57159f78

    SHA256

    ac9a89d771d5b0ff24dafc88c04f3ca3f47a7a269c0cbe1ff4c8f099ae5001b0

    SHA512

    8cbbff1ccadfeb3f06f5c109adf5010ba31a65726507094ba9fd27a3ba45d9878c2f9af8fa83a2455b5a6c3cb9abb22737e84acb2daf0fc3654eed2596161ab4

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/index-dir/temp-index
    Filesize

    96B

    MD5

    be6ec93efec38c97a7813c506f984da1

    SHA1

    869ed60f02e44d95e4de21b5e656dd360442b57c

    SHA256

    7ced070c685801ce7f0bd954e061d51a4b962f22383938181310671372acb1ce

    SHA512

    9bd70175cc3187fa7b108d7002006593d6ea8e87941874d6f584ed43873be0f6ea5a303c5c8b5375bf15c19ba82a5dcdbfda38cc40b224f4f41d2c7a1adb59a7

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/index-dir/temp-index
    Filesize

    96B

    MD5

    7aaa140af370755c5ce336b01cea9eec

    SHA1

    3134e63b289c5b7b2614572e38adf228cef95d77

    SHA256

    56b87aabc04569bf7b779fcf28ca60e4caffcb20ab5a4dab8aebce2693dadd78

    SHA512

    d35885b36b5eaeef2b2e0a8a64894172b1a16ff26b0aa2b46e3766ad04f2f1f111b5687f87fcea3f83952f25db70ac34ce5789024e2d67564cd29dbefd417093

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/index-dir/temp-index
    Filesize

    96B

    MD5

    158d48d83d586aebc770fdaee68d220d

    SHA1

    7b2ed9485ecc231fe1ad5fb5733557c54892962b

    SHA256

    5a6bcd1c715610df1c2a727193cd5d9f65771f1fc92290e040e5aa260a8a0696

    SHA512

    e11aa9b2a04d5cdc7df75bb7962f139cc7812efb48ed54354584a7ece3995efef0db046cc7d300f14a8db0080f95912ed6f5472768cc95c5b7d3871ba99a587a

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/index-dir/temp-index
    Filesize

    96B

    MD5

    87c30a9f7fd590db21d0afd36d9220d3

    SHA1

    b5fde0447cfdc8bb3903795bff1dd657f965946d

    SHA256

    c749b94ef7f37cd2f1f8d70babd68d9688513564424c9593df2f86d6815257a2

    SHA512

    eef268776701611a22b1115cf0c8db71a8d12dc74a01a39b5b685f543ce209aeda97aaf34c5e4f6d1946936b912bf0c4a8da6dabcd5208812823c724b3e523f9

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/Default/HTTP Cache/index-dir/temp-index
    Filesize

    96B

    MD5

    86ce7ee71c145bc1a772b1dc5b7440f0

    SHA1

    4705ba227b4c9d824e9d52c03613c6c126329399

    SHA256

    fbc8c08aadf27b61f082dc785f25c940bfa3bfd9dc695d4985c86eaf0333c48c

    SHA512

    15ee805aa224db9346e6a855b070ea1d9441a4629a312f808d1f187f41935e6a967444803d08164935e5ef2ea17a4531e816748530b38076b67824d6468dff6e

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/cache/WebView/font_unique_name_table.pb
    Filesize

    57KB

    MD5

    f080fa2a56ab5479d58063e5ea871447

    SHA1

    4b3fd57a98916fa5784305b76ba30af26b5253d9

    SHA256

    0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

    SHA512

    8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/ihoftigt8f/ffkyffUhHfh8I89/base.apk.hkyhafI1.g8k
    Filesize

    1.7MB

    MD5

    2426b919cdc0753cfda937d3a87d6226

    SHA1

    f258933ea1ecdb552475032b89fc2b3c83e0e6f0

    SHA256

    e7c8f9bacba13bdadf4c74cf356dc7734b0a269bf1bf02695fbba37f87eaeb98

    SHA512

    2cbb1dbee4a7d8bba818b416b7015ba5128cf77b9ba53906fd6efc2940ee71341e62292a79e43eaaf061a6cd4c21a96893354ab4b8b54e35708b768de5fbf21e

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/shared_prefs/WebViewChromiumPrefs.xml
    Filesize

    127B

    MD5

    97ccd9a2b2063143df56b6937f961ca4

    SHA1

    5e78a91ae5df289ce83443cb7d5589dd3504fb5d

    SHA256

    248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

    SHA512

    86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/shared_prefs/com.android.launcher3.prefs.xml
    Filesize

    128B

    MD5

    20837fd8daf2a2de8d6c4ccd8e90653a

    SHA1

    7ac08617bd4585151c239325aea243d9eca586f7

    SHA256

    e05f0ae0ee70ef2efac07e999da273b5f506462b67549f9080f6cdf469d70cec

    SHA512

    a4fd7ac1ce847a84fe4f47c2e7079f00b16b86213fe840b70e3a55992a043da99ca6fe1c9a723e709e2ee3985ed3b7c5a299d1cf5b29e8228f3f81d3cbb6876a

    Download Submit

  • /data/user/0/com.slhytrowb.wfxaicaiw/shared_prefs/multidex.version.xml
    Filesize

    307B

    MD5

    5f8c471abf0c257fb6937bdc2c2c6aad

    SHA1

    7350bcb368458c783fb6c28aaa3c713a4fe1564f

    SHA256

    c427ab60ceabf828ae928e22c0a6d9bb2bff8f3960834df35bba352177143838

    SHA512

    2a521e6a7e68c50afdea9a068454f31ba7fcc10c5497975ae1b77288eea66f9efc18825abe7a0b0bf8bb6d9944f0d962cb3c5d5c6ae96fffdb7d5f2ca76f3227

    Download Submit