Overview

overview

8

Static

static

7

CoinbaseWallet.apk

android-11-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    CoinbaseWallet.apk

  • Size

    26.9MB

  • Sample

    230417-y7t8qahf61

  • MD5

    00bc25d245aab711cfd3cb567869d814

  • SHA1

    96886d9283142df952cfb449de14e6b4dedc895a

  • SHA256

    7760f268945454278421feef118c866ae21463cf7447ffd83d9a31d6d6954c9c

  • SHA512

    78467499595e2d6e88f5bf818bcea06722df566f29c56330ae57be35bd099acb8f10485e735f3329e3b9592d1bd39aaf3933d187d6c2f40cf55d88007a187c37

  • SSDEEP

    393216:B2t7aA73QLUN/vMEuiZc5DIjb8/PWSPVlAzFKmbjZh5yidIL4grNQhs+:ct7aO3QLUN9CDIjUWS2Yipy7LvrNQP

Score
8/10
androidbankerransomware

Malware Config

Targets

    • Target

      CoinbaseWallet.apk

    • Size

      26.9MB

    • MD5

      00bc25d245aab711cfd3cb567869d814

    • SHA1

      96886d9283142df952cfb449de14e6b4dedc895a

    • SHA256

      7760f268945454278421feef118c866ae21463cf7447ffd83d9a31d6d6954c9c

    • SHA512

      78467499595e2d6e88f5bf818bcea06722df566f29c56330ae57be35bd099acb8f10485e735f3329e3b9592d1bd39aaf3933d187d6c2f40cf55d88007a187c37

    • SSDEEP

      393216:B2t7aA73QLUN/vMEuiZc5DIjb8/PWSPVlAzFKmbjZh5yidIL4grNQhs+:ct7aO3QLUN9CDIjUWS2Yipy7LvrNQP

    Score
    8/10
    bankerransomware

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).

      banker

    • Checks Android system properties for emulator presence.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1

MITRE ATT&CK Matrix

Tasks