General

  • Target

    2ddb55c9b825ab5447ccf778914c38d6c2b9c5220a308015db049dca05963a34.bin

  • Size

    218KB

  • Sample

    240121-1wnb5safgk

  • MD5

    6845b172cbfbe8801574bcecb29391f8

  • SHA1

    819f76ff200724512e1ea965170687b8a069a53b

  • SHA256

    2ddb55c9b825ab5447ccf778914c38d6c2b9c5220a308015db049dca05963a34

  • SHA512

    8d9e3c5915c0cbf1f7394281955a2cbf26856bbd9486643c669b574937b60623448801d79227cf4a2ed7fd1d658a749d2e855aa251e0195ba656fe962c9cd352

  • SSDEEP

    6144:QVhwhZoMbn98xlBaGZMGr7arJWnevtnkKvvcTX6Pqlinrwv:yhwHoMbbGmGHuJ28ntMTX6Pq0nA

Malware Config

Extracted

Family

octo

C2

https://45.153.242.252:7117/gate/

https://45.153.242.252:8080/gate/

Attributes
  • target_apps

    com.google.android.apps.messaging

    at.spardat.bcrmobile

    at.spardat.netbanking

    com.bankaustria.android.olb

    com.android.messaging

    com.bmo.mobile(英文)

    com.cibc.android.mobi

    com.rbc.mobile.android的

    com.scotiabank.mobile(丰业银行手机)

    com.td

    cz.airbank.android

    eu.inmite.prj.kb.mobilbank

    com.bankinter.launcher (英语)

    com.kutxabank.android

    com.rsi

    com.bbva.bbvacontigo

    com.android.chrome的

    com.akbank.android.apps.akbank_direkt

    com.denizbank.mobildeniz

    com.finansbank.mobile.cepsube

    com.garanti.cepsubesi

    com.ingbanktr.ingmobil

    com.kuveytturk.mobil

    com.paribu.app

    com.pozitron.iscep

    com.teb(英语:com.teb)

    com.tmobtech.halkbank(英语:com.tmobtech.halkbank)

    com.vakifbank.mobile(移动版)

    com.ykb.android

    com.ziraat.ziraatmobil

    finansbank.enpara (英语)

    com.aktifbank.nkolay(阿克蒂夫银行.nkolay)

    com.albarakaapp

    com.anadolubank.android

    com.binance.dev

    com.btcturk.pro

    com.cloud.tr

    com.facebook.katana(卡塔纳脸书)

    com.fibabanka.fibabanka.mobile(菲巴银行.菲巴银行.移动电话)

    com.google.android.gm

    com.ininal.wallet

    com.intertech.mobilemoneytransfer.activity(英文)

    com.isbank.isyerim

    com.magiclick.odeabank(英语:com.magiclick.odeabank)

    com.microsoft.office.outlook

    com.mobillium.papara

    com.pttfinans(英语:com.pttfinans)

    com.teb.kurumsal

    com.tfkb的

    com.vakifkatilim.mobil

    com.ziraatkatilim.mobilebanking

    finansbank.enpara.sirketim

    tr.com.abank.dijital

    tr.com.hsbc.hsbc土耳其

    tr.com.param.android

    tr.gov.turkiye.edevlet.kapisi

    trendyol.com

    com.tecnocom.cajalaboral(英语:com.tecnocom.cajalaboral)

    es.bancopopular.nbmpopular(英语:es.bancopopular.nbmpopular)

    es.evobanco.班卡莫维尔

    es.lacaixa.mobile.android.newwapicon

    com.dbs.hk.dbsm银行

    com.hangseng.rbmobile(恒生.rbmobile)

    com.mtel.androidbea

    com.scb.breezebanking.hk

    hk.com.hsbc.hsbchk流动理财

    com.aff.otpdirekt

    com.ideomobile.hapoalim(英语:com.ideomobile.hapoalim)

    com.infrasofttech.indianbank(印度银行)

    com.mobikwik_new

    com.oxigen.oxigen钱包

    jp.co.aeonbank.android.passbook

    jp.co.netbk(英语:jp.co.netbk)

    jp.co.rakuten_bank.乐天银行

    jp.co.sevenbank.AppPassbook(英语:jp.co.sevenbank.AppPassbook)

    jp.co.smbc.direct(英语:jp.co.smbc.direct)

    jp.mufg.bk.applisp.app

    com.barclays.ke.mobile.android.ui

    nz.co.anz.android.mobilebanking

    nz.co.asb.asbmobile

    nz.co.bnz.droid银行

    nz.co.kiwibank.mobile

    getingroup.mobilebanking

    eu.eleader.mobilebanking.pekao.firm

    eu.eleader.mobilebanking.pekao

    eu.eleader.mobilebanking.raiffeisen

    pl.bzwbk.bzwbk24

    pl.ipko.mobile(英语:pl.ipko.mobile)

    pl.mbank银行

    alior.bankingapp.android

    com.comarch.mobile.banking.bgzbnpparibas.biznes

    com.comarch.security.mobilebanking

    com.empik.empikapp

    com.empik.empikfoto

    com.finanteq.finance.ca

    com.orangefinansek

    eu.eleader.mobilebanking.invest

    pl.aliorbank.aib

    pl.bosbank.mobile(移动端)

    pl.bps.bankowoscmobilna

    pl.bzwbk.ibiznes24

    pl.bzwbk.mobile.tab.bzwbk24

    pl.com.rossmann.centauros

    pl.fmbank.smart(英语:pl.fmbank.smart)

    pl.ideabank.手机银行

    pl.ing.mojeing

    pl.millennium.corpApp

    pl.orange.mojeorange

    pl.pkobp.iko

    pl.pkobp.ipkobiznes

    com.pozitron.albarakaturk

    ccom.tmob.denizbank

    com.tmob.tabletdeniz

    com.vakifbank.mobilel

    tr.com.sekerbilisim.mbank

    wit.android.bcpBankingApp.millenniumPL

    com.idamobile.android.hcb

    logo.com.mbanking

    com.openbank(开放银行)

    com.google.android.apps.walletnfcrel

    com.samsung.android.spay

    com.cardsapp.android的

    cz.bsc.rc

    cb.ibank银行

    com.bifit.mobile.ubrr

    com.bssys.mbcphone.ubrir

    净.bl

    com.bifit.mobile.bin

    com.webmoney.my

    com.polehin.android

    com.bitcoin.mwallet

    io.totalcoin.wallet

    com.quppy

    com.sharpdev.fxcoin(英文)

    com.advantage.Raiffeisen银行

    hr.asseco.android.jimba.mUCI.ro

    may.maybank.android (英语)

    ro.btrl.移动

    com.amazon.mShop.android.s跳跃(亚马逊.mShop.android.shopping)

    com.ebay.移动

    com.idamob.tinkoff.android

    com.akbank.android.apps.akbank_direkt_tablet

    com.akbank.softotp

    com.akbank.android.apps.akbank_direkt_tablet_20

    com.fragment.akbank(英文)

    com.ykb.android.mobilonay

    com.ykb.avm

    com.ykb.androidtabl等等

    com.veripark.ykbaz(英语:com.veripark.ykbaz)

    com.softtech.iscek

    com.yurtdisi.iscep

    com.softtech.isbankasi

    com.monitise.isbank莫斯科

    com.magiclick.FinansPOS公司

    com.matriksdata.finansyatirim

    com.vipera.ts.starter.QNB

    com.redrockdigimark

    com.garanti.cepbank(英语:com.garanti.cepbank)

    com.garantibank.cepsubesiro

    biz.mobinex.android.apps.cep_sifrematik

    com.garantiyatirim.fx

    eu.newfrontier.iBanking.mobile.Halk.零售

    tr.com.tradesoft.tradingsystem.gtpmobile.halk

    com。DijitalSahne.EnYakinHalkbank

    com.ziraat.ziraattablet

    com.matriksmobile.android.ziraatTrader

    com.matriksdata.ziraatyatirim.pad

    de.ingdiba.bankingapp

    de.comdirect.android

    de.commerzbanking.mobil

    de.consorsbank银行

    com.db.mm.德意志银行

    de.dkb.portalapp

    com.de.dkb.portalapp

    com.ing.diba.mbbr2

    de.postbank.finanzassistent

    mobile.santander.de

    de.fiducia.smartphone.android.banking.vr

    fr.creditagricole.androidapp

    fr.axa.monaxa(莫纳萨)

    fr.banquepopulaire.cyberplus

    网.bnpparibas.mescomptes

    com.boursorama.android.clients

    com.caisseepargne.android.mobilebanking

    fr.lcl.android.customer区域

    com。PayPal.android.p2pmobile

    com.wf.wellsfargomobile

    com.wf.wellsfargomobile.tablet

    com.wellsFargo.ceomobile公司

    com.usbank.mobilebanking

    com.usaa.mobile.android.usaa(移动版.android.usaa)

    com.suntrust.mobilebanking

    com.moneybookers.skrillpayments.neteller

    com.moneybookers.skrillpayments(com.moneybookers.skrillpayments)

    com.clairmail.fth

    com.konylabs.capitalone(科尼实验室.capitalone)

    com.yinzcam.facilities.verizon(英语:com.yinzcam.facilities.verizon)

    com.chase.sig.android

    com.infonow.bofa

    com.bankofamerica.cashpromobile(美国银行)移动版

    uk.co.bankofscotland.businessbank

    com.grppl.android.shell.BOS

    com.rbs.mobile.android.natwestoffshore

    com.rbs.mobile.android.natwest(英语:com.rbs.mobile.android.natwest)

    com.rbs.mobile.android.natwestbandc

    com.rbs.mobile.investisir

    com.phyder.engage网站

    com.rbs.mobile.android.rbs

    com.rbs.mobile.android.rbsbandc

    uk.co.桑坦德德.桑坦德英国

    uk.co.santander.businessUK.bb

    com.sovereign.桑坦德

    com.ifs.banking.fiid4202

    com.fi6122.godough

    com.rbs.mobile.android.ubr

    com.htsu.hsbcpersonalbanking(汇丰个人银行)

    com.grppl.android.shell.哈利法克斯

    com.grppl.android.shell.CMBlloydsTSB73

    com.barclays.android.barclaysmobilebanking

    com.unionbank.ecommerce.mobile.android

    com.unionbank.ecommerce.mobile.commercial.legacy

    com.snapwork.IDBI的

    com.idbibank.abhay_card

    src.com.idbi

    com.idbi.mpassbook

    com.ing.移动

    com.snapwork.hdfc

    com.sbi.SBIFreedomPlus

    hdfcbank.hdfcquickbank

    com.csam.icici.bank.imobile

    in.co.bankofbaroda.mpassbook

    com.轴.移动

    cz.csob.smartbanking

    sk.sporoapps.accounts

    sk.sporoapps.skener

    com.cleverlance.csas.servis24

    org.westpac.bank(西太平洋银行)

    au.com.suncorp.SuncorpBank(新科普银行)

    org.stgeorge.bank(圣乔治银行)

    org.banksa.银行

    au.com.newcastle永久

    au.com.nab.mobile

    au.com.mebank.banking

    au.com.ingdirect.android

    MyING.be

    com.imb.银行业务2

    com.fusion.ATMLocator

    au.com.cua.mb

    com.commbank.netbank(通讯银行网)

    com.citibank.mobile.au

    com.citibank.mobile.uk

    com.citi.citimobile(花旗移动)

    org.bom.银行

    com.bendigobank.mobile(本迪戈银行.移动版)

    me.doubledutch.hvdnz.cbnationalconference2016

    au.com.bankwest.mobile

    com.bankofqueensland.boq(昆士兰银行.boq)

    com.anz.android.gomoney(安卓货币)

    com.anz.android的

    com.anz.Singapore数字银行

    com.anzspot.mobile(英文)

    com.crowdcompass.appSQ0QACAcYJ

    com.arubanetworks.atmanz

    com.quickmobile.anzirevents15

    at.volksbank.volksbankmobile

    它.volksbank。人造人

    it.secservizi.mobile.atime.bpaa

    de.fiducia.smartphone.android.securego.vr

    com.isis_papyrus.raiffeisen_pay_eyewdg

    网址:easybank.mbanking

    在.easybank.tablet

    at.easybank.securityapp

    at.bawag.m银行

    com.bawagpsk.securityapp

    at.psa.app.bawag

    com.pozitron.vakifbank(英语:com.pozitron.vakifbank)

    com.starfinanz.smob.android.sfinanz状态

    com.starfinanz.mobile.android.pushtan

    com.entersekt.authapp.sparkasse

    com.starfinanz.smob.android.sfinanzstatus.tablet

    com.sta的rfinanz.smob.android.sbanking(英语:rfinanz.smob.android.sbanking)

    com.palatine.android.mobilebanking.prod

    fr.laposte.lapostemobile

    com.cm_prod.bad

    com.cm_prod.epasal

    com.cm_prod_tablet.bad

    com.cm_prod.nosactus

    手机.societegenerale.mobile.lappli

    com.bbva.netcash现金

    com.bbva.bbva钱包

    es.bancosantander.apps(英语:es.bancosantander.apps)

    com.santander.app

    es.cm.android

    es.cm.android.tablet

    com.bankia.wallet

    百思买.android

    com.jiffyondemand.user

    com.latuabancaperandroid

    com.latuabanca_tabperandroid

    com.lynxspa.bancopopolare

    com.unicredit(联合信贷)

    it.bnl.apps.banking

    it.bnl.apps.enterprise.bnlpay

    it.bpc.proconl.mbplus

    it.copergmps.rt.pf.android.sp.bmps

    it.gruppocariparma.nowbanking

    it.ingdirect.app

    它.nogood.container

    it.popso.SCRIGNOapp

    posteitaliane.posteapp.apppostepay

    com.abnamro.nl.mobile.payments(移动支付)

    com.triodos.bankingnl

    nl.asnbank.asnbankieren

    nl.snsbank.mobielbetalen

    com.btcturk

    com.tmob.denizbank(英语:com.tmob.denizbank)

    com.att.my 无线

    com.vzw.hss.myverizon(英文)

    aib.ibank.android

    com.bbnt

    com.csg.cs.dnmbs

    com.discoverfinancial.mobile(发现金融.移动)

    com.eastwest.mobile(东西手机)

    com.fi6256.godough

    com.fi6543.godough

    com.fi6665.godough

    com.fi9228.godough

    com.fi9908.godough

    com.ifs.banking.fiid1369

    com.ifs.mobilebanking.fiid3919

    com.jackhenry.rockvillebankct

    com.jackhenry.washingtontrustbankwa

    com.jpm.sig.android

    com.sterling.onepay(英镑.onepay)

    com.svb.mobilebanking

    org.usemployees.mobile(组织.usemployees.mobile)

    pinacleMobileiPhoneApp.android

    com.fuib.android.spot.online

    com.ukrsibbank.client.android

    eu.unicreditgroup.hvbapptan

    com.targo_prod.bad

    com.db.pwcc.dbmobile

    com.db.mm.norisbank

    com.bitmarket.trader

    com.plunien.poloniex

    com.菌丝体钱包

    com.bitfinex.bfxapp

    com.binance.od应用程序

    com.blockfolio.blockfolio

    com.crypter.cryptocyrrency

    io.getdelta.android

    com.edsoftapps.mycoinsvalue(com.edsoftapps.mycoinsvalue)

    com.coin.profit(com.coin.profit)

    com.mal.saul.coinmarketcap(com.mal.saul.coinmarketcap)

    com.tnx.apps.coinportfolio

    com.coinbase.android的

    com.portfolio.coinbase_tracker

    com.bitpay.wallet

    com.bitcoin.wallet.btc

    com.blocktrail.mywallet

    org.electrum.electrum

    com.paxful.wallet

    com.bitcoin.pocketbook.btc

    net.bitstamp.app

    de.schildbach.wallet

    piuk.blockchain.android

    info.blockchain.merchant

    com.jackpf.blockchain搜索

    com.unocoin.unocoin钱包

    com.unocoin.unocoinmerchantPoS

    com.thunkable.android.santoshmehta364.UNOCOIN_LIVE

    wos.com.zebpay

    com.localbitcoinsmbapp

    com.thunkable.android.manirana54.LocalBitCoins

    com.thunkable.android.manirana54.LocalBitCoins_unblock

    com.localbitcoins.exchange

    com.coins.bit.local

    com.coins.ful.bit

    com.jamalabbasii1998.localbitcoin

    xmr.org.freewallet.app

    com.bitcoin.ss.zebpay印度

    com.kryptokit.jaxx

    com.cajasur.android

    app.wizink.es

    com.grupocajamar.wefferent

    caixagalicia.activamovil

    com.abanca.bancaempresas(英语:com.abanca.bancaempresas)

    net.inverline.bancosabadell.officelocator.android

    es.caixageral.caixageralapp

    com.bankinter.bk钱包

    com.db.pbc.mibanco

    com.indra.itecban.mobile.novobanco

    es.openbank.mobile(英语:es.openbank.mobile)

    es.pibank.客户

    es.bancosantander.empresas(英语:es.bancosantander.empresas)

    com.indra.itecban.triodosbank.mobile.banking

    es.univia.unicajamovil

    com.westernunion.moneytransferr3app.es

    网址:www.ingdirect.nativeframe

    com.bancsabadell.wallet

    com.bankinter.empresas(com.bankinter.empresas)

    com.imaginbank.app

    es.ceca.cajalnet(英语:es.ceca.cajalnet)

    es.ibercaja.ibercajaapp

    es.liberbank.cajasturapp

    gt.com.bi.bienlinea

    ae.ahb.数字

    ae.almasraf.mobileapp

    ae.hsbc.hsbcuae

    air.app.scb.breeze.android.main.my.prod

    air.com.inversis.Andbank智能手机

    app.alansari(阿兰萨里)

    app.indie.my

    app.wizink.pt

    ar.bapro

    ar.com.bcopatagonia.android

    ar.com.redlink.custom

    ar.com.santander.rio.mbanking银行

    ar.宏

    at.erstebank.george

    at.ing.diba.client.onlinebanking

    at.rsg.pfp

    au.com.amp.myportfolio.android

    au.com.commbank.commbiz.prod

    au.com.hsbc.hsBC澳大利亚

    au.com.macquarie.authenticator

    au.com.macquarie.banking

    au.com.pnbank.android

    au.com.rams.RAMS

    au.com.suncorp.marketplace

    au.com.suncorp.rsa.suncorpsecurededauau.com.suncorp.suncorpsecuredauau.com.suncorp.sun.com.suncostious.cn

    au.com.ubank.internetbanking

    be.argenta.bankieren

    be.axa.mobilebanking

    be.belfius.directmobile.android

    br.com.bradesco.next

    br.com.intermedium

    br.com.modalmais

    br.com.original.bank

    br.com.uol.ps.myaccount

    ca.affinitycu.mobile

    ca.bnc.android

    ca.hsbc.hsbccanada

    ca.manulife.MobileGBRS公司

    ca.mobile.explorer(移动浏览器)

    ca.motusbank.mapp(英语:ca.motusbank.mapp)

    ca.pcfinancial.bank(ca.pcfinancial.bank)

    ca.servus.mbanking银行

    ca.tangerine.clients.banking.app

    cc.bitbank.bitbank(比特银行)

    cgd.pt.caixadirectaparticulares

    ch.autoscout24.autoscout24

    cl.android

    cl.bancochile.mbanking银行

    clientapp.swiftcom.org

    co.bitx.android.wallet

    co.com.bancoagrario.icbanking

    co.com.bancofalabella.mobile.omc

    co.com.bbva.mb

    co.edgesecure.app

    co.mona.android

    co.uk.Nationwide.Mobile公司

    co.zip

    com。BankAlBilad.Enjaz应用程序

    com。FNBPA.手机银行

    com。IndianBank.IndOASIS公司

    com。MBSB。银行.移动.银行

    com。MizrahiTefahot.nh

    com.a2a.android.burgan

    com.aadhk.woinvoice

    com.aaib

    com.abanca.bm.pt

    com.acceltree.mtc.screens

    com.accessbank.accessbankapp

    com.adcb.银行

    com.adcb.cbgdigi

    com.adcb.simply生活

    com.adib.mobile(移动通信)

    com.ahlibank.个人

    com.airbitz(美国交易所)

    com。Airbnb.android

    com.alahli.mobile.android

    com.alahli.quickpay

    com.alibaba.intl.android.apps.poseidon(阿里巴巴.intl.android.apps.poseidon)

    com.alinma.retail.mobile

    com.alliance.AOPMobileApp

    com.alloapp.yump

    com.ally.手机银行

    com.alrajhibank.mobile网站

    com.alrajhiretailapp

    com.amazon.sellermobile.android

    com.ambank.ambank在线

    com.americanexpress.android.acctsvcs.us

    com.amx.amxremit

    com.anabatic.canadia

    com.android.vending

    com.anz.trans

    com.aol.mobile.aolapp

    com.app.ecobank

    com.appfactory.tmb

    com.arabbank.arabimobilev2

    com.arkea.android.application.cmb

    com.arkea.android.application.cmso2

    com.asseco.hybrid.bos.prod

    com.aswat.carrefouruae

    com.atb.ATB移动

    com.atb.business移动

    com.aub.mobilebanking.kw.phone

    com.axabanque.fr

    com.azimo.sendmoney(发送钱)

    com.bancocajasocial.geolocation

    com.bancodebogota.bancamovil

    com.bancode委内瑞拉.bdv数字

    com.bancomer.mbanking

    com.bancorpsouth.android

    com.banesco.samfbancamovilunificada

    com.baninter

    com.bankfab.pbg.ae.dubaifirst(迪拜第一银行fab.pbg.ae.dubaifirst)

    com.bankinter.portugal.bmb

    com.bankofbaroda.mconnect(com.bankofbaroda.mconnect)

    com.巴克莱卡杜斯

    com.base.bankalfalah

    com.bawagpsk.bawagpsk

    com.bbt.myfi(英语:com.bbt.myfi)

    com.bbva.GEMA公司

    com.bbva.mobile.pt

    com.bbva.nxt_peru

    com.bca.halobca.android

    com.bca公司

    com.bcp.bank.bcp

    com.beobank_prod.bad

    com.bitfinex.mobileapp

    com.bitpanda.bitpanda

    com.bittrex.trade(比特特雷克斯贸易)

    com.bmoharris.digital(英文)

    com.bnc.金融

    com.bnhp.payments.paymentsapp(com.bnhp.payments.paymentsapp)

    com.bnpp 中。易理财(易邮银行)

    com.bochk.com

    com.boi.mpay(英语:com.boi.mpay)

    com.booking(预订)

    com.botw.mobilebanking

    com.boubyanapp.boubyan.bank(英语:com.boubyanapp.boubyan.bank)

    com.brodnica.hybrid.app

    com.bsm.活动2

    com.bsnebiz.cdb

    com.bybit.app

    com.caisse.epargne.android.tablette

    com.cajaingenieros.android.bancamovil

    com.cajasiete.android.cajasietereport(com.cajasiete.android.cajasietereport)

    com.canarabank.mobility

    com.cbd.移动

    com.cbk.手机银行

    com.cbq.CB移动

    com.cedarplus.agro

    com.changelly.app

    com.cic_prod.bad

    com.cimbmalaysia

    花旗手机.ccc.com.citi.mobile.ccc

    com.citibanamex.banamex移动

    com.citibank.花旗银行MY

    com.citibank.mobile.citiuaePAT

    com.citibank.mobile.sg

    com.citizensbank.androidapp

    com.coastcapitalsavings.dcu(英语:com.coastcapitalsavings.dcu)

    com.compasssavingsbank.mobile(指南针投资银行.移动版)

    com.connectivityapps.hotmail

    com.cooperativebank.bank(合作银行银行)

    com.coppel.coppelapp

    com.creditandorra

    com.current。应用程序

    com.danskebank.mobilebank3.dk

    com.戴夫

    com.db.mobilebanking

    com.db.pbc.DBPay

    com.db.pbc.miabanca

    com.dbs.sg.dbsm银行

    com.dbs.sg.posbmbanking银行

    com.debitoor.android

    com.desjardins.mobile(英文)

    com.dhanlaxmi.dhansmart.mtc

    com.dib.app

    com.douugh.douughapp(杜格.杜格应用)

    com.easybank.易灵银行

    com.ebos.bos网站

    com.electroneum.mobile(电子网.mobile)

    com.emiratesnbd.android

    com.engage.pbb.pbengage2my.release

    com.enjin.mobile.wallet

    com.eofinance财经

    com.eqbank.eqbank(英语:com.eqbank.eqbank)

    com.etisalat.电子钱包

    com.etrade.mobilepro.活动

    com.everis.bsa_1_3

    com.exictos.mbanka.bic

    com.exmo网站

    com.fab.personalbanking

    com.fedmobile的

    com.feib.appbank(英语:com.feib.appbank)

    com.fh.发薪日

    com.fi7026.godough

    com.fibabanka.mobile(com.fibabanka.mobile)

    com.fibi.nativeapp

    com.finanteq.finance.bgz(金融.bgz)

    com.finshell.fin

    com.firstbank.firstmobile(第一银行.firstmobile)

    com.fordeal.android

    com.fortuneo.android

    com.friendipay.app

    com.fss.indus

    com.fss.iob6

    com.fullsix.android.labanquepostale.account访问

    com.fusion.banking

    com.fusion.beyondbank(超越银行)

    com.ge.capital.konysbiapp

    com.gemini.android.app

    com.globe.gcash.android

    com.gmowallet.mobilewallet

    com.goodbarber.ybrmalaysia

    com.google.android.apps.nbu.paisa.user

    com.google.android.gm.lite

    com.google.android.youtube

    com.greater.greater

    com.grupoavalav1.bancamovil

    com.grupoavaloc1.bancamovil

    com.hittechsexpertlimited.hitbtc

    com.hsbc.hsbcnet

    com.亨廷顿网

    com.huobionchainwallet.gp

    com.icomvision.bsc.待定

    com.ics.nl.icscards

    com.icsfs.jkb

    com.ideomobile.discount

    com.idfcfirstbank.optimus

    com.ie.capitalone.uk

    com.iexceed.CBS公司

    com.iexceed.appzillon.ippbMB

    com.imo.android.imoim

    com.imo.android.imoimbeta

    com.imo.android.imoimhd

    com.infosys.alh

    com.infrasoft.uboi

    com.infrasofttech.中央银行

    com.infrasofttech.MahaBank(马哈班克)

    com.instagram.android的

    com.interswitchng.www

    com.isis_papyrus.hypo_pay_eyewdg

    com.itau.empresas(英语:com.itau.empresas)

    com.itau网站

    com.jago.digital银行

    com.kakaobank.channel(卡考银行)渠道

    com.karwatechnologies.karwataxi

    com.kasikorn.retail.mbanking.wap

    com.kbc.mobile.android.phone.kbc

    com.key.android的

    康德基.kwt

    com.kfc.me

    com.肯德基.卡塔尔

    com.kfh.kfh在线

    com.konylabs.HongLeong连接

    com.konylabs.cbplpat

    com.kraken.trade(海妖交易)

    com.krungsri.kma(英语:com.krungsri.kma)

    com.kubi.kucoin(库比.库币)

    com.kudabank.app

    com.kwt.hardeesburger.fastfood(英语:com.kwt.hardeesburger.fastfood)

    com.leumi.leumiwallet

    com。LinkedIn.android

    com.liv.android的

    com.lulu.commerce网站

    com.lumiwallet.android

    com.mail.mobile.android.mail(移动安卓邮件)

    com.mashreq.NeoApp

    com.mbanking.阿治曼银行

    com.mbankuae.amcb

    com.mbc.anb.密钥库

    com.mcom.第一公民

    com.mediolanum.android.fullbanca

    com.mediolanum

    com.meetalbert

    com.mercadolibre

    com.mercadopago.wallet

    com.子午线.android

    com.mfou(英文)ndry.mb.android.mb_136

    com.mifel.mobile.activity

    com.mobikwik_new.bajajfinserv

    com.mobileloft.alpha.droid

    com.mobillium.btcturk

    com.mobius.mobilebank.cartu

    com.moneylion

    com.mootwin.natixis

    com.morabanc.mobileapp

    com.morganstanley.clientmobile.prod

    com.movocash.movo

    com.msf.kbank.移动

    com.mtb.mbanking.sc.retail.prod

    com.myc3card.app

    com.namshi.android

    com.navyfederal.android

    com.nbk.IBG移动端

    com.nearform.ptsb

    com.netflix.mediaclient

    com.netvariant.alkhaliji

    com.noon.buyerapp

    com.nuance.nmc.sihome.metropcs

    com.ocbc.mobile(华侨银行手机)

    com.ocbc.mobilemy

    com.ocito.cdn.activity.banquelaydernier

    com.ocito.cdn.activity.creditdunord

    com.ofss.gbkprodret

    com.okinc.okcoin.intl

    com.okinc.okex.gp

    com.opensooq.OpenSooq

    com.oryx.snoonu

    com.payeer公司

    com.payoneer.android

    com.pcb.mydirect(com.pcb.mydirect)

    com.pcfinancial.mobile(英文)

    com.pizzahutapp(必胜饼应用)

    com.pnc.ecommerce.mobile

    com.pozitron.qib(英语:com.pozitron.qib)

    com.quoine.quoinex.light(英语:com.quoine.quoinex.light)

    com.rak

    com.rbinternational.retail.mobileapp

    com.rbl.rblmycard(英文)

    com.regions.mob银行业务

    com.revolut.revolut

    RHB集团.RHB移动银行

    com.riyadbank.战略

    com.robinhood.android

    com.rsi.科洛尼亚

    com.rsi.ruralviawallet2

    com.s4分钟

    com.sa.gazt.Zakat计算器

    com.sabb.mobilebanking

    com.saib.banking.mobile.android

    com.samba.mb网站

    com.samourai.wallet

    com.桑坦德.bpi

    com.saraswat.mobilebankingv2

    com.sbi.SBAnywhere公司

    com.sbi.lotusintouch(com.sbi.lotusintouch)

    com.scb.ae.宝马

    com.scb.电话

    com.丰业银行

    丰业银行mx.scotiamovil

    com.sella.BancaSella

    com.shaketh(沙克斯酒店)

    com.sib.retail(零售)

    com.snapchat.android的

    com.squareup.cash(平方现金)

    com.tabtrader.android的

    com.targoes_prod.bad

    com.tarjetanaranja.emisor.serviciosClientes.appTitulares

    com.tdbank(英语:com.tdbank)

    com.tencent.mm

    com.tideplatform.banking

    com.todo1.davivienda.mobileapp

    com.todo1.移动

    com.transferwise.android

    com.tronlinkpro.wallet

    com.truist.mobile(新闻网)

    com.turkcell.paycell(土耳其细胞支付细胞)

    com.twitter.安卓

    com.twitter.android.lite

    com.uab.个人

    com.uba.vericash(英语:com.uba.vericash)

    com.ubanquity.redd.uba

    com.ubercab.eats(优步cab.eats)

    com.ubercab

    com.ubldigital.uae

    com.ubs.swidKXJ.android

    com.uob.mighty.app

    com.urpay.消费者

    com.uy.itau.appitauuypf

    com.v2msoft.contasimple

    com.vancity.mobileapp

    com.vanso.gtbankapp(英语:com.vanso.gtbankapp)

    com.veripark(英语:com.veripark)

    com.verizon.familybase.parent

    com.verizon.insideverizon

    com.verizon.messaging.vzmsgs

    com.verizon.onetalk

    com.verizon.sideview(英文)

    com.viber.voip的

    com.vipera.chebanca

    com.vipera.nbf(英语:vipera.nbf)

    com.vipera.ts.starter.MashreqAE

    com.vipera.ts.starter.MashreqQA

    com.virginmoney.cards(维珍钱卡)

    com.vtb.移动银行

    com.wallet.crypto.trustapp

    com.warbabank.wallet

    com.wavesplatform.wallet

    com.whatsapp

    com.whatsapp.w4b的

    com.willmobile.mobilebank.fcb

    com.woodforest(森林通讯)

    com.wrx.wazirx

    com.yahoo.mobile.client.android.mail(安卓邮件)

    com.yap.银行业

    com.zainkw.zain

    com.zellepay.zelle(泽勒支付.zelle)

    com.zenithBank.eazymoney(英语:com.zenithBank.eazymoney)

    com.zoluxiones.officebanking(办公银行)

    com.zzkko(zzkko)

    coop.bancocredicoop.bancamobile

    de.adesso_mobile.secureapp.netbank

    de.comdirect.app

    de.hafas.android.dimp

    de.mobile.android.app

    de.number26.android

    de.桑坦德.presentation

    de.sdvrz.ihb.mobile.app

    de.sdvrz.ihb.mobile.secureapp.sparda.produktion

    de.traktorpool

    dk.nordea.移动银行

    doge.org.freewallet.app

    ee.mtakso.客户端

    enbd.手机银行

    企业.com.anz.shield

    es.bancosantander.wallet

    es.caixagalicia.activamovil

    es.caixaontinyent.caixaontinyentapp

    es.cecabank.ealia2103应用商店

    es.orangebank.app

    es.桑坦德.Criptocalculadora

    es.桑坦德德.money

    es.unicajabanco.app

    eu.afse.omnia.attica

    eu.atlantico.bancoat兰蒂科普

    eu.eleader.mobilebanking.abk的

    eu.eleader.mobilebanking.kib

    eu.eleader.mobilebanking.nbk

    eu.netinfo.colpatria.system(英语:eu.netinfo.colpatria.system)

    出埃及记运动.出埃及记

    fr.bnpp.digitalbanking

    fr.bred.fr

    fr.hsbc.hsbc法国

    fr.lcl.android.entreprise

    fr.oney.mobile.mescomptes

    ge.bog.移动银行

    ge.lb.移动银行

    ge.mobility.basisbank(ge.mobility.basisbank)

    ge.mobility.emoney(英语:ge.mobility.emoney)

    global.bithumb.android

    gr.winbank.mobile.cyprus

    gr.winbank.mobile下一个

    HR.asseco.Android.Intesa.isbd.cib

    hr.asseco.android.jimba.mUCI.hu

    hr.asseco.android.mtoken.bos

    hu.bb.mobilapp

    hu.cardinal.cib.mobilapp

    hu.cardinal.erste.mobilapp

    hu.khb的

    hu.mkb.mobilapp

    hu.otpbank.手机

    网址:id.aladinbank.mobile

    网址:d.bmri.livin

    id.co.比特币

    同上.co.bri.brimo

    id.co.myhomecredit(我的家信用)

    同上.dana

    il.co.yahav.mob银行

    il.co.yellow.app

    io.cex.app.prod

    io.ethos.通用钱包

    io.metamask(英文)

    io.safepal.钱包

    it.bcc.iccrea.mycartabcc

    it.caitalia.apphub(英语:it.caitalia.apphub)

    它.carige

    它.creval.bancaperta

    it.hype.app

    it.icbpi.移动

    it.phoenixspa.inbank(英语:it.phoenixspa.inbank)

    it.relax银行

    jp.auone.钱包

    jp.co.jcb.my

    jp.co.nttdata

    jp.coincheck.android的

    jp.japanpost.post.postbox.android

    jp.ne.paypay.android.app

    ktbcs.netbank(ktbcs.netbank)

    Lt.SpectroFinance.Spectrocoin.Android.钱包

    ma.gbp.pocketbank

    我.cryptopay.android

    移动性.ge.terabank银行

    mx.bancosantander.supermovil

    mx.bancsabadell.part

    mx.com.bb.b2

    mx.hsbc.hsbc墨西哥

    my.com.hongleongconnect.mobileconnect

    my.com.hsbc.hsbc马来西亚

    my.com.maybank2u.m2umobile

    网络.aramex

    net.bitbay.bitcoin(比特币.bitbay.bitcoin)

    net.garagecoders.e_llavescotiainfo

    net.one97.支付TM

    org.banking.bom.businessconnect(英文)

    org.banking.bsa.businessconnect(英文)

    org.banking.stg.businessconnect(org.banking.stg.businessconnect)

    org.microemu.android.model.common.VTUserApplicationBNBJMB

    org.microemu.android.model.common.VTUserApplicationBNRTMB

    org.microemu.android.model.common.VTUserApplicationLINKMB

    org.telegram.messenger (英语)

    org.toshi(组织.toshi)

    org.westpac.col (英语)

    ovo.id

    pe.com.interbank.mobilebanking

    pe.com.scotiabank.blpm.android.client

    pe.pichincha.bm

    飞马.project.ebh.mobile.android.bundle.mobilebank

    pl.bsszczytno.ebomobilepro

    pl.envelobank.aplikacja

    Pl.fakturownia

    pl.ifirma.ifirmafaktury

    pl.nestbank.nestbank(内斯特银行)

    Noblebank.移动端

    pl.novum.mobile2

    pl.raiffeisen.nfc

    posteitaliane.posteapp.appbpol

    pt.bancobest.android.mobilebanking

    pt.bancobpi.mobile.fiabilização

    pt.bctt.appbctt

    pt.bigonline.BiGbile

    pt.cgd.caderneta

    pt.cgd.caixadirectaempresas

    pt.eurobic.apps.mobilebanking

    pt.novobanco.nbapp的

    pt.novobanco.nbsmarter

    pt.oney.oneyapp

    pt.santander.oneappparticulares

    pt.santandertotta.mobileempresas

    pt.santandertotta.mobileparticulares

    pt.sibs.android.mbway的

    qa.hsbc.hsbcqatar

    qa.ooredoo.omm

    sa.alrajhibank.tahweelapp

    sa.com.stcpay

    sk.vub.移动

    softax.pekao.powerpay

    src.com.bni

    tcig.mynajm(英语:tcig.mynajm)

    TSB.手机银行

    uk.co.hsbc.hsbcukmobilebanking

    uk.co.mbna.cardservices.android

    uk.co.metrobankonline.mobile.android.production

    uk.co.tescomobile.android

    uk.co.tsb.newmobilebank(英国公司TSB.newmobilebank)

    us.zoom.videomeetings

    uy.brou

    uy.com.brou.token

    wit.android.bcpBankingApp.activoBank

    wit.android.bcpBankingApp.millennium

AES_key

Targets

    • Target

      2ddb55c9b825ab5447ccf778914c38d6c2b9c5220a308015db049dca05963a34.bin

    • Size

      218KB

    • MD5

      6845b172cbfbe8801574bcecb29391f8

    • SHA1

      819f76ff200724512e1ea965170687b8a069a53b

    • SHA256

      2ddb55c9b825ab5447ccf778914c38d6c2b9c5220a308015db049dca05963a34

    • SHA512

      8d9e3c5915c0cbf1f7394281955a2cbf26856bbd9486643c669b574937b60623448801d79227cf4a2ed7fd1d658a749d2e855aa251e0195ba656fe962c9cd352

    • SSDEEP

      6144:QVhwhZoMbn98xlBaGZMGr7arJWnevtnkKvvcTX6Pqlinrwv:yhwHoMbbGmGHuJ28ntMTX6Pq0nA

    • Octo

      Octo is a banking malware with remote access capabilities first seen in April 2022.

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Removes its main activity from the application launcher

    • Acquires the wake lock

    • Reads information about phone network operator.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Matrix

Tasks