Overview

overview

10

Static

static

10

Krinko (1).apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Krinko (1).apk

  • Size

    9.3MB

  • Sample

    240120-3cdppsagg5

  • MD5

    f433418dafa15824209af203f432667c

  • SHA1

    ed8138a27857d7e17b708292b526c68f59e18af7

  • SHA256

    8a20716b8d3287b16ef1bd0b0f5aff9ea870a725f8f8db4d97d33961c30c4573

  • SHA512

    39d8321b2091f5b2d9575557fe9f9dfd434b2de4f1a22b6b72a8f7f861a5d827b798b64b17aebc6e119f3fcae77a2f8f81c105353b7fee7f5d49ca90d6c6e54d

  • SSDEEP

    98304:EIacnA4jzRjqsIjnO9r06UfMto/CE3mzjzBBTc0tAE2S:5WsIjO9rkfMtICEWzPvn

Score
10/10
spynoteandroidbanker

Malware Config

Targets

    • Target

      Krinko (1).apk

    • Size

      9.3MB

    • MD5

      f433418dafa15824209af203f432667c

    • SHA1

      ed8138a27857d7e17b708292b526c68f59e18af7

    • SHA256

      8a20716b8d3287b16ef1bd0b0f5aff9ea870a725f8f8db4d97d33961c30c4573

    • SHA512

      39d8321b2091f5b2d9575557fe9f9dfd434b2de4f1a22b6b72a8f7f861a5d827b798b64b17aebc6e119f3fcae77a2f8f81c105353b7fee7f5d49ca90d6c6e54d

    • SSDEEP

      98304:EIacnA4jzRjqsIjnO9r06UfMto/CE3mzjzBBTc0tAE2S:5WsIjO9rkfMtICEWzPvn

    Score
    8/10
    banker

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      banker

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests enabling of the accessibility settings.

    • Acquires the wake lock

    behavioral1

MITRE ATT&CK Matrix

Tasks