General
- Target 844efceeeeff73da35ac13c217ad5723c456ecec01fada7f92b9203fc29e7dcd
- Size 15.7MB
- Sample231220-e5qmzafbd8
- SHA256 844efceeeeff73da35ac13c217ad5723c456ecec01fada7f92b9203fc29e7dcd
- MD5 b87fea08d3fd6f9d0a4a46b18b5b3f8e
- SHA1 9d54231e93035fcde45851fcf26795d8fe366a7a
- SHA512 9c578e637a81c52a32a208d90ccf99ee63693c80278309115450f21427fe9b33c2f5fc0a0a1a9b649d08fe01e73663f2aa28b8311bdb95f65b3eed72f125f3f8
- SSDEEP 393216:v4irHAeHcBmacX7X52NWdXJq2TN51XcwnpObrfum7m:lg2CqgY5NpOLm
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
844efceeeeff73da35ac13c217ad5723c456ecec01fada7f92b9203fc29e7dcd.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
844efceeeeff73da35ac13c217ad5723c456ecec01fada7f92b9203fc29e7dcd.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
844efceeeeff73da35ac13c217ad5723c456ecec01fada7f92b9203fc29e7dcd.apk
Resource
android-x64-arm64-20231215-en
Malware Config
Extracted
-
sharkbot
-
http://mefika.me/
-
target_apps
com.example.creatersa
com.barclays.android.barclaysmobilebanking
com.bankofireland.mobilebanking
com.cooperativebank.bank
ftb.ibank.android
com.nearform.ptsb
uk.co.mbna.cardservices.android
com.danskebank.mobilebank3.uk
com.barclays.bca
com.tescobank.mobile
com.virginmoney.uk.mobile.android
com.monitise.client.android.yorkshire
com.monitise.client.android.clydesdale
com.cooperativebank.smile
com.starlingbank.android
uk.co.metrobankonline.mobile.android.production
uk.co.santander.santanderUK
uk.co.hsbc.hsbcukmobilebanking
uk.co.tsb.newmobilebank
com.grppl.android.shell.BOS
com.grppl.android.shell.halifax
com.grppl.android.shell.CMBlloydsTSB73
it.copergmps.rt.pf.android.sp.bmps
it.extrabanca.mobile
it.relaxbanking
it.bnl.apps.banking
it.bnl.apps.enterprise.hellobank
it.ingdirect.app
it.popso.SCRIGNOapp
it.nogood.container
posteitaliane.posteapp.appbpol
com.latuabancaperandroid
com.latuabancaperandroid.pg
com.latuabancaperandroid.ispb
com.fineco.it
com.CredemMobile
com.bmo.mobile
com.fideuram.alfabetobanking
com.lynxspa.bancopopolare
com.vipera.chebanca
Targets
-
- Target 844efceeeeff73da35ac13c217ad5723c456ecec01fada7f92b9203fc29e7dcd
- Size 15.7MB
- SHA256 844efceeeeff73da35ac13c217ad5723c456ecec01fada7f92b9203fc29e7dcd
- MD5 b87fea08d3fd6f9d0a4a46b18b5b3f8e
- SHA1 9d54231e93035fcde45851fcf26795d8fe366a7a
- SHA512 9c578e637a81c52a32a208d90ccf99ee63693c80278309115450f21427fe9b33c2f5fc0a0a1a9b649d08fe01e73663f2aa28b8311bdb95f65b3eed72f125f3f8
- SSDEEP 393216:v4irHAeHcBmacX7X52NWdXJq2TN51XcwnpObrfum7m:lg2CqgY5NpOLm
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Acquires the wake lock