Analysis

  • max time kernel
    581s
  • max time network
    131s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    22/10/2022, 14:09

General

  • Target
    461d2c436581d8e0ecf5593976e2bc201bfc70441404033782c46912abd6b89e.apk
  • Size 2.0MB
  • Sample221022-rf4vhsdfcn
  • SHA256 461d2c436581d8e0ecf5593976e2bc201bfc70441404033782c46912abd6b89e
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Brata

    Brata is a banking trojan malware first seen in 2019.

  • Brata payload 2 IoCs
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • koala.viber.vip
    1⤵
    • Loads dropped Dex/Jar
    PID:4850

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        base.apk.classes1.zip

        • Path /data/user/0/koala.viber.vip/code_cache/secondary-dexes/base.apk.classes1.zip
        • Size 3.8MB
        • SHA256 8e5275f2246b815385edef0d86a861340740e299b97b24359968e00b9297e439
        • MD5 SHA1 SHA512 SSDEEP

        a11y

        • Path /data/user/0/koala.viber.vip/files/a11y
        • Size 8B
        • SHA256 cde0fb0dec1400c54a0f7e7eafa73624c53e4da258bbd34b3380a0defeba95c1
        • MD5 SHA1 SHA512

        multidex.version.xml

        • Path /data/user/0/koala.viber.vip/shared_prefs/multidex.version.xml
        • Size 306B
        • SHA256 0fdcfb4336ca945d0d58b0becf7c828fdb4f0238c11784f4b42d2cce97c3f98a
        • MD5 SHA1 SHA512