Overview

overview

10

Static

static

10

8ef40f13c6...1a.apk

android-9-x86

8

8ef40f13c6...1a.apk

android-13-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8ef40f13c6192bd8defa7ac0b54ce2454e71b55867bdafc51ecb714d02abfd1a

  • Size

    2.0MB

  • Sample

    231220-h6pzlsceb4

  • MD5

    0ea22a4baee75c86f9895e39cbc04572

  • SHA1

    cf610aae906ffcfd52c08d6ba03d9ce2c9996ac8

  • SHA256

    8ef40f13c6192bd8defa7ac0b54ce2454e71b55867bdafc51ecb714d02abfd1a

  • SHA512

    228481850ab1532989774e0e738041359bf81c5867f7d3bacf9eb32c36784eb330d23fa52bbdda58ef6b657e34686d95675f602229f6088f6a17ef374061996f

  • SSDEEP

    49152:4Fkzdw14Nb12ssSjs502qFL6a2D4j9+dwGxFqyMrxdRhVzdJ+:lw1yB2V509V6fkj9CtbLMrxzzd0

Score
10/10
hermitandroidbankerevasionstealthtrojan

Malware Config

Targets

    • Target

      8ef40f13c6192bd8defa7ac0b54ce2454e71b55867bdafc51ecb714d02abfd1a

    • Size

      2.0MB

    • MD5

      0ea22a4baee75c86f9895e39cbc04572

    • SHA1

      cf610aae906ffcfd52c08d6ba03d9ce2c9996ac8

    • SHA256

      8ef40f13c6192bd8defa7ac0b54ce2454e71b55867bdafc51ecb714d02abfd1a

    • SHA512

      228481850ab1532989774e0e738041359bf81c5867f7d3bacf9eb32c36784eb330d23fa52bbdda58ef6b657e34686d95675f602229f6088f6a17ef374061996f

    • SSDEEP

      49152:4Fkzdw14Nb12ssSjs502qFL6a2D4j9+dwGxFqyMrxdRhVzdJ+:lw1yB2V509V6fkj9CtbLMrxzzd0

    Score
    8/10
    bankerevasionstealthtrojan

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      banker

    • Removes its main activity from the application launcher

      stealthtrojan

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Acquires the wake lock

    • Reads information about phone network operator.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

      evasion
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks