General

  • Target

    D65AE353CE5D975CEA85BB0FAB578590A90061173657BA2E1A0C1110D9B8EB91.apk

  • Size

    3.5MB

  • Sample

    220925-rhvdvsfac5

  • MD5

    d7678cf0d4bbaf4db0702b8e2412a74c

  • SHA1

    2eb5708467d480a6dd07fb1283366f729926976f

  • SHA256

    d65ae353ce5d975cea85bb0fab578590a90061173657ba2e1a0c1110d9b8eb91

  • SHA512

    0942560c8e506c909392c70dddd6ef03ca6aa364a1d608f36fa6c8e6b0c7f54cc3b04fc809bc095540401deaaccd510ba0648547e8195a2f9d0145c63e20e2d6

  • SSDEEP

    98304:wLzMSyy/g3dGxaMmSDk5GkL7WQ3aWTBDxP26O:GvykxaMTDML7xaWTbOB

Malware Config

Targets

    • Target

      D65AE353CE5D975CEA85BB0FAB578590A90061173657BA2E1A0C1110D9B8EB91.apk

    • Size

      3.5MB

    • MD5

      d7678cf0d4bbaf4db0702b8e2412a74c

    • SHA1

      2eb5708467d480a6dd07fb1283366f729926976f

    • SHA256

      d65ae353ce5d975cea85bb0fab578590a90061173657ba2e1a0c1110d9b8eb91

    • SHA512

      0942560c8e506c909392c70dddd6ef03ca6aa364a1d608f36fa6c8e6b0c7f54cc3b04fc809bc095540401deaaccd510ba0648547e8195a2f9d0145c63e20e2d6

    • SSDEEP

      98304:wLzMSyy/g3dGxaMmSDk5GkL7WQ3aWTBDxP26O:GvykxaMTDML7xaWTbOB

    • TeaBot

      TeaBot is an android banker first seen in January 2021.

    • TeaBot payload

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks