bankbot[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bankbot.zip
Size

1.5MB
MD5

062a5d8fb4105c3cfe4fe3c0bb919a4f
SHA1

921df952c61383f94e678ecc00de8f1b5877eacb
SHA256

6c9ee2d59aa0c707de936d70ce9583386e7a8a110d6035dd5d134eafa63d08f7
SHA512

cd701afa5d09ed94c37128191897ad521443d6e62c119f8271ec57bc1c5eff1bafc149a477f502cfc558b07b4bcd089e1c1b2cbd8be43f3ae26468913ee275d9
SSDEEP

24576:ogWOkoIzxd+1DrB74Y8IMLaFv5eqtd7jiZiqDrq3Q4PIZ6rVF5x/hb:fWqIzx45ee1g2Ilr8Q4IAbr5

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO

Files

bankbot.zip
.zip

Password: infected
39413b2215f225da68530fa312b08f566a7bd64e55fac70d81eefe8e5cfa6ee4.apk
.apk android arch:arm

com.ggyydx.cointree

com.uzmap.pkg.LauncherUI

Activities

com.uzmap.pkg.LauncherUI

android.intent.action.MAIN

Permissions

android.permission.INTERNET
com.huawei.android.launcher.permission.CHANGE_BADGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.CAMERA
android.permission.RECORD_AUDIO
android.permission.FLASHLIGHT
android.permission.BLUETOOTH_ADMIN
android.permission.BLUETOOTH
android.permission.FOREGROUND_SERVICE
android.permission.REQUEST_INSTALL_PACKAGES

Receivers

com.uzmap.pkg.uzapp.UPExtraBridge

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.DOWNLOAD_COMPLETE
android.intent.action.DOWNLOAD_NOTIFICATION_CLICKED
android.intent.apicloud.notification

Services