Overview

overview

10

Static

static

7

4067054f20...96.apk

android-9-x86

10

4067054f20...96.apk

android-10-x64

10

4067054f20...96.apk

android-11-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4067054f202cc8e87557915783d4468b54985c5cc7b0b57df98ffbb106475196.apk

  • Size

    2.8MB

  • Sample

    220907-f51cvagchm

  • MD5

    4642c7a56039a82d8268282802c2fee9

  • SHA1

    6210e111a2c5dfbdb5d2c04fda48f4ca3d08b630

  • SHA256

    4067054f202cc8e87557915783d4468b54985c5cc7b0b57df98ffbb106475196

  • SHA512

    85cf3f0ec3e0073a7228a5e8f15d6ff707b7e031c3f65340ca1f9a25b039dcbeeca0d019572706df33f4bc37b8d5dbe994c883cfbd1a460c91231f34517b2d30

  • SSDEEP

    49152:DwgcICrG/hqSniYtN25YhcKWaCE5nduTMF5/9sIjZgKlN0q/uLSnls:crG/QQiYtEYhcKDC0ndWMP/9s8ZgyNlS

Score
10/10
teabotandroidbankerevasioninfostealertrojan

Malware Config

Targets

    • Target

      4067054f202cc8e87557915783d4468b54985c5cc7b0b57df98ffbb106475196.apk

    • Size

      2.8MB

    • MD5

      4642c7a56039a82d8268282802c2fee9

    • SHA1

      6210e111a2c5dfbdb5d2c04fda48f4ca3d08b630

    • SHA256

      4067054f202cc8e87557915783d4468b54985c5cc7b0b57df98ffbb106475196

    • SHA512

      85cf3f0ec3e0073a7228a5e8f15d6ff707b7e031c3f65340ca1f9a25b039dcbeeca0d019572706df33f4bc37b8d5dbe994c883cfbd1a460c91231f34517b2d30

    • SSDEEP

      49152:DwgcICrG/hqSniYtN25YhcKWaCE5nduTMF5/9sIjZgKlN0q/uLSnls:crG/QQiYtEYhcKDC0ndWMP/9s8ZgyNlS

    Score
    10/10
    teabotbankerevasioninfostealertrojan

    • TeaBot

      TeaBot is an android banker first seen in January 2021.

      bankertrojaninfostealerteabot

    • TeaBot payload

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

      evasion
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks