Analysis
- max time kernel
581s - max time network
131s - platform
android_x64 - resource
android-x64-20220823-en - resource tags
androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system - submitted
22/10/2022, 14:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
461d2c436581d8e0ecf5593976e2bc201bfc70441404033782c46912abd6b89e.apk
Resource
android-x86-arm-20220823-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
461d2c436581d8e0ecf5593976e2bc201bfc70441404033782c46912abd6b89e.apk
Resource
android-x64-20220823-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
461d2c436581d8e0ecf5593976e2bc201bfc70441404033782c46912abd6b89e.apk
Resource
android-x64-arm64-20220823-en
4 signatures
150 seconds
General
- Target 461d2c436581d8e0ecf5593976e2bc201bfc70441404033782c46912abd6b89e.apk
- Size 2.0MB
- Sample221022-rf4vhsdfcn
- SHA256 461d2c436581d8e0ecf5593976e2bc201bfc70441404033782c46912abd6b89e
- MD5 1d436d3959583abbec64a711f117e752
- SHA1 b41cde7169df7b86952b6253804f05aade7091d3
- SHA512 ab3f0753f6abcc6d7f92e8f403680b98304527d6e0209946a552059aa27792ca2eac94b73540f2db3d4a1d493d5af2e8ec52c2d379936acc733b6b0cd9b92b9e
- SSDEEP 49152:Mqe2mAHD5EH3XFh146qUqOPES/fOnQygIzOA5:7e2mGUFh146ZPPES/G/HzOK
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- Brata
Brata is a banking trojan malware first seen in 2019.
- Brata payload 2 IoCs
resource yara_rule behavioral2/memory/4850-0.dex family_brata2 behavioral2/memory/4850-0.dex family_brata3 - Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/koala.viber.vip/code_cache/secondary-dexes/base.apk.classes1.zip 4850 koala.viber.vip
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/koala.viber.vip/code_cache/secondary-dexes/base.apk.classes1.zip
- Size 3.8MB
- SHA256 8e5275f2246b815385edef0d86a861340740e299b97b24359968e00b9297e439
- MD5 eb2f48d9ad888a7c22b2371de0e1e294
- SHA1 bc0a8d6a35a5e42e0216fe95be0f7acbff494951
- SHA512 7be4fde44fa51edfa3567934c36218cd991f320bbb762af750f1fe57dd0e7ce65ebd1aba5da1c30db82adbcedfc6b2f410e7692d0f8165418e60e2a75e1d05bb
- SSDEEP 49152:BE+64MJnpJzy+jnxK62zJbp321ffIE295:BP6jLzdxK627Nd
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/koala.viber.vip/files/a11y
- Size 8B
- SHA256 cde0fb0dec1400c54a0f7e7eafa73624c53e4da258bbd34b3380a0defeba95c1
- MD5 2e5d8aa3dfa8ef34ca5131d20f9dad51
- SHA1 3cc1d5a427a45820b04fe30f78a972b784952460
- SHA512 a0527c1de9df8c529337f73be73cf98fcde155fcf00c7522f67a4a6298b52853d9767815d8811c2a7e5e829871a5dea9174b2b7e90fb7c98a62467240dd78434
- MD5 SHA1 SHA512
- Path /data/user/0/koala.viber.vip/shared_prefs/multidex.version.xml
- Size 306B
- SHA256 0fdcfb4336ca945d0d58b0becf7c828fdb4f0238c11784f4b42d2cce97c3f98a
- MD5 1dad9ebae7dfcebc469327fbe05424dc
- SHA1 427c9404feee16aa50f84b3cbc90dd46504317e3
- SHA512 2c08a74a95d95f77e212a51916ca2ea5b99de758d53c304d9c84730e273cd4907811d2844b237f38145b004d0b8bd3ce543b6cac93ff4e6da874e8bb098ca956
- MD5 SHA1 SHA512