Overview

overview

10

Static

static

6

7823e56b4b...54.apk

android-9-x86

10

7823e56b4b...54.apk

android-10-x64

10

7823e56b4b...54.apk

android-11-x64

10

Resubmissions

18/04/2024, 09:49

240418-ltf3qahe97

26/01/2024, 19:01

240126-xph73accg310

Sharing

Copy URL Twitter E-mail

General

  • Target
    7823e56b4b1631ef52bbd5b95c186554
  • Size 4.3MB
  • Sample240126-xph73accg3
  • SHA256 b88e7421bc61f4ce20c0694418fc97c1e77cfd3f2053857f87cc47512a55c3d3
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
teabotandroidbankerevasioninfostealerstealthtrojan

Malware Config

Targets

    • Target
      7823e56b4b1631ef52bbd5b95c186554
    • Size 4.3MB
    • SHA256 b88e7421bc61f4ce20c0694418fc97c1e77cfd3f2053857f87cc47512a55c3d3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    teabotbankerevasioninfostealerstealthtrojan

    • TeaBot

      TeaBot is an android banker first seen in January 2021.

      bankertrojaninfostealerteabot

    • TeaBot payload

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Acquires the wake lock

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

      evasion
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks