Overview

overview

10

Static

static

7

ndQOhY0ypd.apk

android-9-x86

10

ndQOhY0ypd.apk

android-10-x64

10

ndQOhY0ypd.apk

android-11-x64

10

Resubmissions

13-10-2022 15:48

221013-s89f5sbhen 10

06-10-2022 16:41

221006-t7h38sacan 10

05-10-2022 13:53

221005-q667wseeb2 10

31-08-2022 20:23

220831-y6g7rsdba5 10

31-08-2022 20:11

220831-yykb6abbdk 10

31-08-2022 19:40

220831-ydqy7sagfk 10

31-08-2022 17:36

220831-v6tzsahdgm 10

31-08-2022 17:32

220831-v4htqshddn 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ndQOhY0ypd.apk

  • Size

    5.2MB

  • Sample

    221006-t7h38sacan

  • MD5

    ca559118f4605b0316a13b8cfa321f65

  • SHA1

    5ef4d5784738d79f22f9bc5e8db7c94985bc1a3a

  • SHA256

    3eb7efa71648ae819f1bff89399717805129487081e8261dd65bf596f2467054

  • SHA512

    091f07d51e9d7c924666f28a30b03e5ff887e239ad2ed9a99cbd65e7b9350c6fc89cafdbbe05de27f8ea6dc90ff8484c1b692fc891b58fcc6104fa6878e8f3d7

  • SSDEEP

    98304:+Ld3yR0X7GPzP21DeReIrJ0jJMooanGHNdyc7scnuB5k9MWdU:+LxyR0X7Qz/diMolGfyXcNMWdU

Score
10/10
sovasova_v4androidbankerevasioninfostealertrojan

Malware Config

Targets

    • Target

      ndQOhY0ypd.apk

    • Size

      5.2MB

    • MD5

      ca559118f4605b0316a13b8cfa321f65

    • SHA1

      5ef4d5784738d79f22f9bc5e8db7c94985bc1a3a

    • SHA256

      3eb7efa71648ae819f1bff89399717805129487081e8261dd65bf596f2467054

    • SHA512

      091f07d51e9d7c924666f28a30b03e5ff887e239ad2ed9a99cbd65e7b9350c6fc89cafdbbe05de27f8ea6dc90ff8484c1b692fc891b58fcc6104fa6878e8f3d7

    • SSDEEP

      98304:+Ld3yR0X7GPzP21DeReIrJ0jJMooanGHNdyc7scnuB5k9MWdU:+LxyR0X7Qz/diMolGfyXcNMWdU

    Score
    10/10
    sovasova_v4bankerevasioninfostealertrojan

    • SOVA_v4 payload

    • Sova

      Android banker first seen in July 2021.

      bankertrojaninfostealersova

    • Sova payload

    • Sova_v4

      Android banker first seen in July 2021.

      bankertrojaninfostealersova_v4

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Removes a system notification.

      evasion
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks