b338b3c6116aeb9fc6989f1724373bc70242f2f5f7ab49816a0de11ede895cfd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1a37caa4022572537af75aa94be744d
Size

23.0MB
Sample

240327-pdxmbaeh6z
MD5

e1a37caa4022572537af75aa94be744d
SHA1

5e5f80020156231353d1c22ed1b1646117da457b
SHA256

b338b3c6116aeb9fc6989f1724373bc70242f2f5f7ab49816a0de11ede895cfd
SHA512

a94ea1fbb23bb2bd98244b52039b673e9a1cf52673234f05f3486955f7c256b7a890238cb01ad70a3c55a74ff79abef9de2dcde950965ecf4935a9442431894c
SSDEEP

393216:pu2OLG6t0kLIQg0zQlMhiY6fDf1jKPrvu+k1ZAt3FRUV0t+Cs/VemK+nFv5ne0Tb:w0CXQ6h56LRKPrvJmZejq9c6pc4gWUfm

Score

8^/10

android banker discovery evasion persistence

Malware Config

Targets

- Target
  
  e1a37caa4022572537af75aa94be744d
- Size
  
  23.0MB
- MD5
  
  e1a37caa4022572537af75aa94be744d
- SHA1
  
  5e5f80020156231353d1c22ed1b1646117da457b
- SHA256
  
  b338b3c6116aeb9fc6989f1724373bc70242f2f5f7ab49816a0de11ede895cfd
- SHA512
  
  a94ea1fbb23bb2bd98244b52039b673e9a1cf52673234f05f3486955f7c256b7a890238cb01ad70a3c55a74ff79abef9de2dcde950965ecf4935a9442431894c
- SSDEEP
  
  393216:pu2OLG6t0kLIQg0zQlMhiY6fDf1jKPrvu+k1ZAt3FRUV0t+Cs/VemK+nFv5ne0Tb:w0CXQ6h56LRKPrvJmZejq9c6pc4gWUfm
Score

8^/10

banker discovery evasion persistence
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  evasion persistence
- Reads information about phone network operator.
  discovery
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Foreground Persistence

Privilege Escalation

Defense Evasion

Foreground Persistence

Credential Access

Discovery

Software Discovery

Security Software Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankerdiscoveryevasionpersistence