Overview

overview

10

Static

static

10

a98a224b64...e9.apk

 

a98a224b64...e9.apk

android-10-x64

8

a98a224b64...e9.apk

android-11-x64

8

Analysis

  • max time kernel
    2518837s
  • max time network
    145s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20-12-2023 11:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a98a224b644d3d88eed27aa05548a41e0178dba93ed9145250f61912e924b3e9.apk

  • Size

    1.1MB

  • MD5

    6b69a9bf30d76c135db369956774f2cb

  • SHA1

    22f49fa7fe1506d2639f08e9ae198e262396c052

  • SHA256

    a98a224b644d3d88eed27aa05548a41e0178dba93ed9145250f61912e924b3e9

  • SHA512

    2df561ffe8b9d8ce3ab6b1a5b1eccb4312e7230fa20c4da451e76cdb53e94169ffc4b2fbc0a09fe45ca6e5551921ba51670c087b0eb899ccc9206186ec0b83dd

  • SSDEEP

    24576:idX3e1cFTNITHE4Uo+N6SSmZ1e8+wyJ8Doj562FuNGlhlsdbC/lwU6Xf:idneJTZrq6XmZ8ZwEsMuNGl3OmSXf

Score
8/10
bankerstealthtrojan

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
    banker
  • Removes its main activity from the application launcher 1 IoCs
    stealthtrojan
  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.vodaservices
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    • Removes its main activity from the application launcher
    • Requests cell location
    • Acquires the wake lock
    PID:4622

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.vodaservices/app_cache_cont/lastSettings
    Filesize

    152B

    MD5

    01ea1721ed19e7e83fd87ced96243e2e

    SHA1

    77c7042d28584159cb1818e67389d98582276c98

    SHA256

    2980336098fd91cc799d5f3485cc72ac3ca8a63caa2c9ab1fcc8d6fd5a338cd5

    SHA512

    6d7622661648f0806d2c83eff79bb3c9207b654a99b7e1039476c3b8b361b3160df433b48f13deb6e2484d4f0e8ff625e2813444335d2b80158a86ba7175c563

    Download Submit