Overview

overview

10

Static

static

7

ndQOhY0ypd.apk

android-9-x86

10

Resubmissions

13/10/2022, 15:48

221013-s89f5sbhen10

06/10/2022, 16:41

221006-t7h38sacan10

05/10/2022, 13:53

221005-q667wseeb210

31/08/2022, 20:23

220831-y6g7rsdba510

31/08/2022, 20:11

220831-yykb6abbdk10

31/08/2022, 19:40

220831-ydqy7sagfk10

31/08/2022, 17:36

220831-v6tzsahdgm10

31/08/2022, 17:32

220831-v4htqshddn7

Sharing

Copy URL Twitter E-mail

General

  • Target
    ndQOhY0ypd.apk
  • Size 5.2MB
  • Sample221005-q667wseeb2
  • SHA256 3eb7efa71648ae819f1bff89399717805129487081e8261dd65bf596f2467054
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
malibotandroidbankerevasioninfostealertrojan

Malware Config

Targets

    • Target
      ndQOhY0ypd.apk
    • Size 5.2MB
    • SHA256 3eb7efa71648ae819f1bff89399717805129487081e8261dd65bf596f2467054
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    malibotbankerevasioninfostealertrojan

    • Malibot payload

    • malibot

      Malibot is an Android banking malware with the ability to bypass 2FA/MFA codes.

      infostealertrojanbankermalibot

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

      evasion
    behavioral1

MITRE ATT&CK Matrix

Tasks