ee49aebae77cb10f34baf079a2229085f9af01817b8cec2f26785e5783f2bb04 | Triage

Sharing

General

Target

ee49aebae77cb10f34baf079a2229085f9af01817b8cec2f26785e5783f2bb04
Size

16.2MB
Sample

240325-p647vsgd27
MD5

caf889f1b553b584001eddb4fb9351a6
SHA1

dcc4cd77221527b57a7ef401ed73dd2c53c1571d
SHA256

ee49aebae77cb10f34baf079a2229085f9af01817b8cec2f26785e5783f2bb04
SHA512

5036f1557e1388d354cb91dac5f79cc08d16b786ee9942874be11d95603447950d8ca45182a00500ad63e21a8e106bc6b7db15650de4a53b1ff99fda5bec0592
SSDEEP

393216:A+WltN+zP6dBES/ct/Q9I3/U5IuXKPSMy1d:SLNIP6dGSa/Tc5ZKPSv/

Score

8^/10

android banker discovery evasion persistence

Malware Config

Targets

- Target
  
  ee49aebae77cb10f34baf079a2229085f9af01817b8cec2f26785e5783f2bb04
- Size
  
  16.2MB
- MD5
  
  caf889f1b553b584001eddb4fb9351a6
- SHA1
  
  dcc4cd77221527b57a7ef401ed73dd2c53c1571d
- SHA256
  
  ee49aebae77cb10f34baf079a2229085f9af01817b8cec2f26785e5783f2bb04
- SHA512
  
  5036f1557e1388d354cb91dac5f79cc08d16b786ee9942874be11d95603447950d8ca45182a00500ad63e21a8e106bc6b7db15650de4a53b1ff99fda5bec0592
- SSDEEP
  
  393216:A+WltN+zP6dBES/ct/Q9I3/U5IuXKPSMy1d:SLNIP6dGSa/Tc5ZKPSv/
Score

8^/10

banker discovery evasion persistence
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  evasion persistence
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Foreground Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Foreground Persistence

Credential Access

Discovery

Software Discovery

Security Software Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankerdiscoveryevasionpersistence