Overview

overview

10

Static

static

7

4067054f20...96.apk

android-9-x86

10

4067054f20...96.apk

android-10-x64

10

4067054f20...96.apk

android-11-x64

Analysis

  • max time kernel
    376293s
  • max time network
    155s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    07-09-2022 05:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4067054f202cc8e87557915783d4468b54985c5cc7b0b57df98ffbb106475196.apk

  • Size

    2.8MB

  • MD5

    4642c7a56039a82d8268282802c2fee9

  • SHA1

    6210e111a2c5dfbdb5d2c04fda48f4ca3d08b630

  • SHA256

    4067054f202cc8e87557915783d4468b54985c5cc7b0b57df98ffbb106475196

  • SHA512

    85cf3f0ec3e0073a7228a5e8f15d6ff707b7e031c3f65340ca1f9a25b039dcbeeca0d019572706df33f4bc37b8d5dbe994c883cfbd1a460c91231f34517b2d30

  • SSDEEP

    49152:DwgcICrG/hqSniYtN25YhcKWaCE5nduTMF5/9sIjZgKlN0q/uLSnls:crG/QQiYtEYhcKDC0ndWMP/9s8ZgyNlS

Score
10/10
teabotbankerinfostealertrojan

Malware Config

Signatures

  • TeaBot

    TeaBot is an android banker first seen in January 2021.

    bankertrojaninfostealerteabot
  • TeaBot payload 2 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • trust.royal.vibrant
    1⤵
    • Loads dropped Dex/Jar
    PID:4938

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/trust.royal.vibrant/app_DynamicOptDex/dAW.json
    Filesize

    1.2MB

    MD5

    e26686268d4e7f993537cde6fdf676c0

    SHA1

    3b41ccaaa72f34fbfdb67c221c925c43a5bc327c

    SHA256

    1046d91653f3d60a84504e8a82803b2f623a1b81b665550631db4392b78a4779

    SHA512

    3c81ff2b92488fece4b7530c24490abacbd64e133eb8802d51dd1ed700f356224d2a4be52e02f64dbfda9665f03f7b43f420e9cee45d17e23aa82fbfc27e5d4e

    Download Submit

  • /data/user/0/trust.royal.vibrant/app_DynamicOptDex/dAW.json
    Filesize

    1.2MB

    MD5

    9e3d14912382f5672e69b9455e8834b5

    SHA1

    177bd78d2b2f07d244428f1c75a72c76aae5c4e1

    SHA256

    0471cfb3cd0583eb2dcff405f88352093801a1d9471446dfe5174b421e58ba1a

    SHA512

    67c5d88231bf5558838b6b935d2e55b412a96af31b0a49216b02b83e148cefaa9828aafbd8bc79380e1ec21b65fb5243225703fd05c7089a4b92519fd85d894e

    Download Submit

  • /data/user/0/trust.royal.vibrant/app_DynamicOptDex/dAW.json
    Filesize

    1.2MB

    MD5

    9e3d14912382f5672e69b9455e8834b5

    SHA1

    177bd78d2b2f07d244428f1c75a72c76aae5c4e1

    SHA256

    0471cfb3cd0583eb2dcff405f88352093801a1d9471446dfe5174b421e58ba1a

    SHA512

    67c5d88231bf5558838b6b935d2e55b412a96af31b0a49216b02b83e148cefaa9828aafbd8bc79380e1ec21b65fb5243225703fd05c7089a4b92519fd85d894e

    Download Submit

  • /data/user/0/trust.royal.vibrant/app_webview/GPUCache/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    Download Submit

  • /data/user/0/trust.royal.vibrant/app_webview/GPUCache/index-dir/temp-index
    Filesize

    96B

    MD5

    3ac488c70eed6fd3f588350d98341801

    SHA1

    a78cea6202ed462588f125d3aa6d4dce91958511

    SHA256

    875dfd0ad142e544b9a03fc28662186d8d99c34e808d76b8eed323cc8a5815bb

    SHA512

    a14877b2627d61db54b8ef47736d97b257ce583cd1e07432e8014b409fe9c9a0abee270af0fa6ec505383004ef658791aeaa6218925f7a3ae57404a18941d36d

    Download Submit

  • /data/user/0/trust.royal.vibrant/app_webview/Web Data
    Filesize

    112KB

    MD5

    b663831f8cc130493476d94f2d7a5330

    SHA1

    043a1956ab8e40821d67043f8a9110a8eb36fb93

    SHA256

    c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

    SHA512

    e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

    Download Submit

  • /data/user/0/trust.royal.vibrant/app_webview/Web Data-journal
    Filesize

    1KB

    MD5

    d440b983d0afc8bdf36e0359b9f075fc

    SHA1

    7405b44c0b883b8ff33549e014d6687f978f56ec

    SHA256

    1e830d8cd4e6a87d9edc407e27cc3366876e33eadc3f22df6fb6c6fd2dba645b

    SHA512

    2c459ed7703a5e659a807f751d44defe89beb48ba893fdd20d0dfecd578e60c4eb9407f3f5e341f30eac9496ed78c579818d94478cfd1966db200ba74f5523b1

    Download Submit

  • /data/user/0/trust.royal.vibrant/app_webview/metrics_guid
    Filesize

    36B

    MD5

    983b6964e95c3c0a14cd70dee21db6df

    SHA1

    0efac654dbb3cf51c77e5d0e38855a7cafcaadd0

    SHA256

    676c8fc995b3c393502c79aac50292872320f01c22934a2131a0bec7edebd294

    SHA512

    16cdd9b8d93dd2b39fe19fc6f79e3d0d72009123bcf2ecc080fdc924c177f471f3d728dee2b8799181e8326140b263d65b7224a3163dc996fd8aa9c773f2ec7d

    Download Submit

  • /data/user/0/trust.royal.vibrant/cache/WebView/Crashpad/settings.dat
    Filesize

    40B

    MD5

    c9bffa7cdb5c1662988d24a27ec1a88f

    SHA1

    816f10ae9b26e00818ef096f3f42fecd0421f247

    SHA256

    970896073a5a5dfbfb7296af741d4c21024cd3fccf62490a4ff10851d4e07337

    SHA512

    ff4932118690118a0b032ea37250c3545a1d38b9f863a0d7a8dcb1060957244811a0a23ada1916fac5f7bf99d7e02d8b99a3caa3aa6258a0530809d047801b2c

    Download Submit

  • /data/user/0/trust.royal.vibrant/cache/org.chromium.android_webview/Code Cache/js/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    Download Submit

  • /data/user/0/trust.royal.vibrant/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
    Filesize

    96B

    MD5

    68afa4d9d31570e13bf14f4a0a6f7ec9

    SHA1

    2b3ef13d63875b370001ae59e66e2396472334c8

    SHA256

    803cefe7cb8a51c031425bf4ae2723128cae9caed2d1f77cd4454faedfd9c512

    SHA512

    83ab20088967a6a450b88911ca26d8c8657f181a9e6bb7a6f5d5d48c209674048da80e6ddc0c656ff33954ad0057c754bf80597f5bb08778f2bdd727cfdc18f5

    Download Submit

  • /data/user/0/trust.royal.vibrant/shared_prefs/WebViewChromiumPrefs.xml
    Filesize

    127B

    MD5

    6ef709b8536878951e87c29a1518fc2b

    SHA1

    24376c70b00152501b3d98df61fa7db435339172

    SHA256

    10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

    SHA512

    96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

    Download Submit