Overview

overview

10

Static

static

10

cryptoapp.apk

android-9-x86

8

cryptoapp.apk

android-10-x64

10

cryptoapp.apk

android-11-x64

10

Resubmissions

22/09/2022, 05:59

220922-gpshqsdhcq10

04/07/2022, 03:32

220704-d3qdragdc88

30/06/2022, 05:11

220630-fvqqnagaep8

28/06/2022, 09:39

220628-lmr7eaach97

21/06/2022, 09:05

220621-k17nksegh68

Sharing

Copy URL Twitter E-mail

General

  • Target
    cryptoapp.apk
  • Size 3.7MB
  • Sample220922-gpshqsdhcq
  • SHA256 b12dd66de4d180d4bbf4ae23f66bac875b3a9da455d9010720f0840541366490
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
malibotandroidbankerinfostealertrojan

Malware Config

Targets

    • Target
      cryptoapp.apk
    • Size 3.7MB
    • SHA256 b12dd66de4d180d4bbf4ae23f66bac875b3a9da455d9010720f0840541366490
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    malibotbankerinfostealertrojan

    • malibot

      Malibot is an Android banking malware with the ability to bypass 2FA/MFA codes.

      infostealertrojanbankermalibot

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Requests enabling of the accessibility settings.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks