Analysis
-
max time kernel
14912s -
max time network
149s -
platform
android_x64 -
resource
android-x64-20230831-en -
resource tags
-
submitted
05-10-2023 17:26
General
-
Target
d277aa53a7b51eb15b31f0cb7893f63eff695def94c61102c219003c34785670.apk
-
Size
3.3MB
-
MD5
5ebb07b6637f81fbdce0040f780dffa7
-
SHA1
aa5062769a8f855daf410de53cfd85ef6fdcf1bb
-
SHA256
d277aa53a7b51eb15b31f0cb7893f63eff695def94c61102c219003c34785670
-
SHA512
0f6de475da0c41097a9f9fea49ed2c6ef13d63a6635267a1c710793811f62237a5a78653160b36832261d5c13ce4a2de24c9e84d1e297bcc6f56a1b6b6d96271
-
SSDEEP
49152:gF29DLLIbAAGD603nJvCL2yB2M5a5+yrqL7C5WtPbsN0IfD2a+qoR/kENawqo:gyDL9AGD6cJ6LDBjwrq/C5wo0O2dTcu
Malware Config
Signatures
-
TeaBot
TeaBot is an android banker first seen in January 2021.
-
TeaBot payload 3 IoCs
-
Makes use of the framework's Accessibility service. 2 IoCs
-
Acquires the wake lock. 1 IoCs
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
-
Removes a system notification. 1 IoCs
Processes
-
wire.rocket.breeze1⤵
- Makes use of the framework's Accessibility service.
- Acquires the wake lock.
- Loads dropped Dex/Jar
- Removes a system notification.
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/wire.rocket.breeze/app_DynamicOptDex/WjC.jsonFilesize
1.3MB
MD5a5321977ebddee92f84819d1ac5044af
SHA1cb3fcb6b2b1720300944184a6104f3420e3cfd51
SHA25635b8e1945e58c9bdfc812e0356c20ac2201db5d7ab09cf95de3537d7177429d3
SHA512de98d625186a3ce448a675a6f92f1ebdd626949ad7045fc93d0a6e95a1bd61c725dc3d86ad286ea88c9fb8fd91843b20533c99162344b3f9207c462597e53e0a
-
/data/data/wire.rocket.breeze/app_DynamicOptDex/WjC.jsonFilesize
1.3MB
MD581640422d214e96f335096d74ea078ba
SHA14ff16cb72a7130bf64ef36e4cb922362d047183d
SHA256ce100d7a870d6a48c083889f92a4ea7005618be40d05e39732bd2788b3166567
SHA512f2802657d40982dc78f158a719f03a6982e3f63785ab01146b8ab9ab702c7d9cd4a1bc411e0351876881b81aec410e79ee9d5338564b38c2e26f49353e5754c5
-
/data/data/wire.rocket.breeze/app_DynamicOptDex/oat/WjC.json.cur.profFilesize
1KB
MD563012636697fa7377cdb4223341ad09f
SHA1f21e563da76d38713696b72d67b44f87439d2ad7
SHA25607b1c4c4a5bf429a44ff5ed29a98c0225a8390fbbf813a41e284ee1c6b50ae65
SHA51271769d9e5a9b2d68d006e2a11033855fb7bcee86750441c8ed55bcedc527065ddd582b0a4586b011122a7cb8ebcbbd872abf5edab39550beb4c0cbf043c33248
-
/data/user/0/wire.rocket.breeze/app_DynamicOptDex/WjC.jsonFilesize
1.3MB
MD581640422d214e96f335096d74ea078ba
SHA14ff16cb72a7130bf64ef36e4cb922362d047183d
SHA256ce100d7a870d6a48c083889f92a4ea7005618be40d05e39732bd2788b3166567
SHA512f2802657d40982dc78f158a719f03a6982e3f63785ab01146b8ab9ab702c7d9cd4a1bc411e0351876881b81aec410e79ee9d5338564b38c2e26f49353e5754c5
-
/data/user/0/wire.rocket.breeze/app_DynamicOptDex/WjC.jsonFilesize
1.3MB
MD581640422d214e96f335096d74ea078ba
SHA14ff16cb72a7130bf64ef36e4cb922362d047183d
SHA256ce100d7a870d6a48c083889f92a4ea7005618be40d05e39732bd2788b3166567
SHA512f2802657d40982dc78f158a719f03a6982e3f63785ab01146b8ab9ab702c7d9cd4a1bc411e0351876881b81aec410e79ee9d5338564b38c2e26f49353e5754c5