Resubmissions

04/01/2024, 16:03

240104-thfltaeecr10

21/12/2023, 06:53

231221-hn1ndsafa66

General

  • Target
    507a817a93737700fb9f1f8770052bf5c3cdbc1ff0c4d7b0186c2f9c6956ed1e
  • Size 3.6MB
  • Sample240104-thfltaeecr
  • SHA256 507a817a93737700fb9f1f8770052bf5c3cdbc1ff0c4d7b0186c2f9c6956ed1e
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • spybanker

C2
  • https://homanew.fun/mlt/

Signatures

  • Spybanker family
  • Requests dangerous framework permissions 2 IoCs

File Explorer

  • 507a817a93737700fb9f1f8770052bf5c3cdbc1ff0c4d7b0186c2f9c6956ed1e
    .apk 3.6MB

507a817a93737700fb9f1f8770052bf5c3cdbc1ff0c4d7b0186c2f9c6956ed1e

  • SHA256 507a817a93737700fb9f1f8770052bf5c3cdbc1ff0c4d7b0186c2f9c6956ed1e
  • MD5 SHA1 SHA512 SSDEEP
com.bkhck.mellat

Android Permissions

507a817a93737700fb9f1f8770052bf5c3cdbc1ff0c4d7b0186c2f9c6956ed1e

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.INTERNET