Overview

overview

10

Static

static

10

KrinkoSt3al3r.apk

android-11-x64

8

KrinkoSt3al3r.apk

android-13-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    KrinkoSt3al3r.apk

  • Size

    9.3MB

  • Sample

    240120-3vfl1sbbe4

  • MD5

    462ea5ac2debe5aaa603b5d8292aeba0

  • SHA1

    8d9c75712096f9f8a7b4379bf0fbe4d1e5f3b76c

  • SHA256

    8a520434346a49bf28d3f20f2ee59db26a2c669db11b6c3f7d63c630af306c11

  • SHA512

    a3366f7c4d5cd00bcb053fa64aeadd0466af2646bb891787b724f5b5c625804a08f1ef37cbc12a7a5b1568cd5332ce622223af98397be04a2f93301047a4d3f1

  • SSDEEP

    98304:HDSK0P2c3g7ivbRBLDS1og+imgeOUnYGmz7zB71TW0tUNti4:di2eg7iNmfD/xz51dx4

Score
10/10
spynoteandroidbanker

Malware Config

Targets

    • Target

      KrinkoSt3al3r.apk

    • Size

      9.3MB

    • MD5

      462ea5ac2debe5aaa603b5d8292aeba0

    • SHA1

      8d9c75712096f9f8a7b4379bf0fbe4d1e5f3b76c

    • SHA256

      8a520434346a49bf28d3f20f2ee59db26a2c669db11b6c3f7d63c630af306c11

    • SHA512

      a3366f7c4d5cd00bcb053fa64aeadd0466af2646bb891787b724f5b5c625804a08f1ef37cbc12a7a5b1568cd5332ce622223af98397be04a2f93301047a4d3f1

    • SSDEEP

      98304:HDSK0P2c3g7ivbRBLDS1og+imgeOUnYGmz7zB71TW0tUNti4:di2eg7iNmfD/xz51dx4

    Score
    8/10
    banker

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      banker

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests enabling of the accessibility settings.

    • Acquires the wake lock

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks