Overview

overview

10

Static

static

10

900fe34d53...b8.apk

android-9-x86

1

900fe34d53...b8.apk

android-10-x64

6

900fe34d53...b8.apk

android-11-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    900fe34d5394689c86ead76666e79620ad7a10109c75d661af9bc7d8fb0c27b8

  • Size

    7.2MB

  • MD5

    dd1d30c44c6519c58f79f660fdf9f04c

  • SHA1

    ae705015f8c6613e63fb0639d8e8222d45108982

  • SHA256

    900fe34d5394689c86ead76666e79620ad7a10109c75d661af9bc7d8fb0c27b8

  • SHA512

    47d0fcdb2fee633e0e3e8d041055ccf092911ea9be1c461d912ee3480deb4ea941045395f7201fb6bafc0422664583e4e71cd0dc17452a93656d0257d5c4e1d5

  • SSDEEP

    196608:a1FadIbsA229ZcqjAIb2Ju9nhQ3x14sHtateu1VbQhMXs5P:a1FqS96Udah14sHtateu11ls5P

Score
10/10
sharkbot

Malware Config

Extracted

Family

sharkbot

C2

https://cdopea.store/stats/

Attributes
  • target_apps

    com.barclays.android.barclaysmobilebanking

    com.bankofireland.mobilebanking

    com.cooperativebank.bank

    ftb.ibank.android

    com.nearform.ptsb

    uk.co.mbna.cardservices.android

    com.danskebank.mobilebank3.uk

    com.barclays.bca

    com.tescobank.mobile

    com.virginmoney.uk.mobile.android

    com.monitise.client.android.yorkshire

    com.monitise.client.android.clydesdale

    com.cooperativebank.smile

    com.starlingbank.android

    uk.co.metrobankonline.mobile.android.production

    uk.co.santander.santanderUK

    uk.co.hsbc.hsbcukmobilebanking

    uk.co.tsb.newmobilebank

    com.grppl.android.shell.BOS

    com.grppl.android.shell.halifax

    com.grppl.android.shell.CMBlloydsTSB73

    it.copergmps.rt.pf.android.sp.bmps

    it.extrabanca.mobile

    it.relaxbanking

    it.bnl.apps.banking

    it.bnl.apps.enterprise.hellobank

    it.ingdirect.app

    it.popso.SCRIGNOapp

    it.nogood.container

    posteitaliane.posteapp.appbpol

rc4.plain

Signatures

  • Sharkbot family
    sharkbot
  • Requests dangerous framework permissions 6 IoCs

Files

  • 900fe34d5394689c86ead76666e79620ad7a10109c75d661af9bc7d8fb0c27b8
    .apk android

    com.potsepko9.FileManagerApp

    com.potsepko9.FileManagerApp.ui.intro.IntroActivity


Android Permissions

900fe34d5394689c86ead76666e79620ad7a10109c75d661af9bc7d8fb0c27b8

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

com.google.android.gms.permission.AD_ID

android.permission.PACKAGE_USAGE_STATS

android.permission.REQUEST_DELETE_PACKAGES

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.QUERY_ALL_PACKAGES

android.permission.GET_ACCOUNTS

android.permission.MANAGE_ACCOUNTS

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.android.vending.BILLING

android.permission.MANAGE_EXTERNAL_STORAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE