Overview

overview

8

Static

static

7

aba17776b9...d6.apk

android-9-x86

8

aba17776b9...d6.apk

android-10-x64

7

aba17776b9...d6.apk

android-11-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    aba17776b98b8660b50d2a4ef9aa0a79e17f22a47a76b7658b3981f7bddeadd6.apk

  • Size

    9.1MB

  • Sample

    230511-r2cyxsea93

  • MD5

    7dfb7a568fad88e7e92da2ce1ac71483

  • SHA1

    993224c563be93bd613cc3d9fca4e08986771803

  • SHA256

    aba17776b98b8660b50d2a4ef9aa0a79e17f22a47a76b7658b3981f7bddeadd6

  • SHA512

    62cf3958b2c12b10ca677ad2379de4f17d880f76e34ab29a3c1c4be8bcad984b01f4748279a103d28ceeca07dd197aec6d024c44919eafe7cfac3a46049948fb

  • SSDEEP

    196608:chXjJ3vwJpH6umaBA146MM3ZL9+OIJyMW2EobaT:DpTX2JMc9+1yMWHT

Score
8/10
androidbankerevasionransomware

Malware Config

Targets

    • Target

      aba17776b98b8660b50d2a4ef9aa0a79e17f22a47a76b7658b3981f7bddeadd6.apk

    • Size

      9.1MB

    • MD5

      7dfb7a568fad88e7e92da2ce1ac71483

    • SHA1

      993224c563be93bd613cc3d9fca4e08986771803

    • SHA256

      aba17776b98b8660b50d2a4ef9aa0a79e17f22a47a76b7658b3981f7bddeadd6

    • SHA512

      62cf3958b2c12b10ca677ad2379de4f17d880f76e34ab29a3c1c4be8bcad984b01f4748279a103d28ceeca07dd197aec6d024c44919eafe7cfac3a46049948fb

    • SSDEEP

      196608:chXjJ3vwJpH6umaBA146MM3ZL9+OIJyMW2EobaT:DpTX2JMc9+1yMWHT

    Score
    8/10
    bankerevasionransomware

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).

      banker

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads information about phone network operator.

    • Removes a system notification.

      evasion

    • Uses Crypto APIs (Might try to encrypt user data).

      ransomware
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks