Overview

overview

10

Static

static

7

47bb7f855c...cd.apk

android-9-x86

10

47bb7f855c...cd.apk

android-10-x64

10

47bb7f855c...cd.apk

android-11-x64

10

Resubmissions

27/01/2023, 07:24

230127-h8ld7she4310

25/04/2022, 13:47

220425-q3kjqaccd48

23/04/2022, 16:23

220423-tvtdfadcc310

22/04/2022, 08:33

220422-kfyj6sgbam10

Analysis

  • max time kernel
    4062154s
  • max time network
    165s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    27/01/2023, 07:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    47bb7f855cdf116c62499240089fa1b7a69585e8b7f639e192b9d038da4094cd.apk
  • Size 3.2MB
  • Sample230127-h8ld7she43
  • SHA256 47bb7f855cdf116c62499240089fa1b7a69585e8b7f639e192b9d038da4094cd
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
teabotbankerinfostealertrojan

Malware Config

Extracted

Family

  • teabot

C2

  • http://51.38.166.153:80/api/

Signatures

  • TeaBot

    TeaBot is an android banker first seen in January 2021.

    bankertrojaninfostealerteabot
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.nnawozvvi.pamwhbawm
    1⤵
    • Loads dropped Dex/Jar
    PID:4770

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        base.apk.gp8ghaf1.hth
        • Path /data/user/0/com.nnawozvvi.pamwhbawm/8jIIkIkopq/gkttjgFgiakjHfF/base.apk.gp8ghaf1.hth
        • Size 622KB
        • SHA256 b17570a35cee1028853df373c565da61fb1dff751f755001e8545093084464f3
        • MD5 SHA1 SHA512 SSDEEP
        Download

        index
        • Path /data/user/0/com.nnawozvvi.pamwhbawm/app_webview/GPUCache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.nnawozvvi.pamwhbawm/app_webview/GPUCache/index-dir/temp-index
        • Size 96B
        • SHA256 3a53d09aeacc1be0892941c84b709a93eb1ee856ab4f66f9282e0e84679f052c
        • MD5 SHA1 SHA512
        Submit Download

        Web Data
        • Path /data/user/0/com.nnawozvvi.pamwhbawm/app_webview/Web Data
        • Size 112KB
        • SHA256 c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Web Data-journal
        • Path /data/user/0/com.nnawozvvi.pamwhbawm/app_webview/Web Data-journal
        • Size 1KB
        • SHA256 351193116156bdafe5350b3a9a93e0d58915595b080cd747a274ae905388661a
        • MD5 SHA1 SHA512
        Submit Download

        metrics_guid
        • Path /data/user/0/com.nnawozvvi.pamwhbawm/app_webview/metrics_guid
        • Size 36B
        • SHA256 78f01b6a636615791c95104697d6deacb79f006c1388f14d222dac10fec29031
        • MD5 SHA1 SHA512
        Submit Download

        settings.dat
        • Path /data/user/0/com.nnawozvvi.pamwhbawm/cache/WebView/Crashpad/settings.dat
        • Size 40B
        • SHA256 a67805eda040425f0d22605891d062354faa3c11a1d278005544273ecaebe9a5
        • MD5 SHA1 SHA512
        Submit Download

        index
        • Path /data/user/0/com.nnawozvvi.pamwhbawm/cache/org.chromium.android_webview/Code Cache/js/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512
        Submit Download

        temp-index
        • Path /data/user/0/com.nnawozvvi.pamwhbawm/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
        • Size 96B
        • SHA256 4934cb8dc13f3cbdec11fd0a837746e4a17b4603c2425d749fb300a38397c193
        • MD5 SHA1 SHA512
        Submit Download

        WebViewChromiumPrefs.xml
        • Path /data/user/0/com.nnawozvvi.pamwhbawm/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
        • MD5 SHA1 SHA512
        Submit Download

        multidex.version.xml
        • Path /data/user/0/com.nnawozvvi.pamwhbawm/shared_prefs/multidex.version.xml
        • Size 307B
        • SHA256 adcce95e0c8194187ea9aef584ebd203d9d836ca426886cc257f14c066e4bc39
        • MD5 SHA1 SHA512
        Submit Download