Overview

overview

8

Static

static

7

ready.apk

android-11-x64

8

Resubmissions

13-07-2023 12:17

230713-pf91eshe4t 8

13-07-2023 12:11

230713-pcwcvshe3s 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ready.apk

  • Size

    6.2MB

  • Sample

    230713-pf91eshe4t

  • MD5

    47edda7aad43b8cbc0c327e073beb088

  • SHA1

    1ba64dc1d68460e8c2118fec2e2633a721fcd15c

  • SHA256

    1caf7baebd960992d5032028bd9e6502768d8ee8f03dfd26905b2aee0ce83a03

  • SHA512

    b37a1023615ba5ad7a84362890b9fb83ca31103098ca338dbe8db626415f0a508f2303b5633c3a08af4a646e7a668198ab7cdd521527781e5ec7f3b0334d0ec2

  • SSDEEP

    24576:YkG7ivAnqAoDuHRXPth97DhUFCUexb18G:jG7TnqhYR97dj1v

Score
8/10
androidbankerevasion

Malware Config

Targets

    • Target

      ready.apk

    • Size

      6.2MB

    • MD5

      47edda7aad43b8cbc0c327e073beb088

    • SHA1

      1ba64dc1d68460e8c2118fec2e2633a721fcd15c

    • SHA256

      1caf7baebd960992d5032028bd9e6502768d8ee8f03dfd26905b2aee0ce83a03

    • SHA512

      b37a1023615ba5ad7a84362890b9fb83ca31103098ca338dbe8db626415f0a508f2303b5633c3a08af4a646e7a668198ab7cdd521527781e5ec7f3b0334d0ec2

    • SSDEEP

      24576:YkG7ivAnqAoDuHRXPth97DhUFCUexb18G:jG7TnqhYR97dj1v

    Score
    8/10
    bankerevasion

    • Makes use of the framework's Accessibility service.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).

      banker

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

      evasion

    • Removes a system notification.

      evasion
    behavioral1

MITRE ATT&CK Matrix

Tasks