Resubmissions

02-04-2024 07:18

240402-h5dvysbc72 10

13-04-2023 13:04

230413-qaxzcach6w 7

General

  • Target

    CoinSpot.apk

  • Size

    3.6MB

  • Sample

    240402-h5dvysbc72

  • MD5

    382e4022f901ebc2fa15a168a8dc5a20

  • SHA1

    a8afa19a4aa30b144387101a58e7f52335f24eeb

  • SHA256

    153410238d01773e5c705c6d18955793bd61cb2e82c5c7656e74563bb43b3ffa

  • SHA512

    891b38c568d56325a51394c8676e9553534dc470b8272cdbe610ff530f63ca15b03436143f4af23141ef9580a9a90ec4d6fd1448ed5ec93130290de242162c4a

  • SSDEEP

    49152:0CEMb7Wdu21EpCPOzbGHYBLJ/Oys84q9rsljigY2a1WQOqvauFOJ+AIibJWhL9Bt:FXb/VUP2GHYBJOyI3l2WaUqCKYSKJLRE

Malware Config

Targets

    • Target

      CoinSpot.apk

    • Size

      3.6MB

    • MD5

      382e4022f901ebc2fa15a168a8dc5a20

    • SHA1

      a8afa19a4aa30b144387101a58e7f52335f24eeb

    • SHA256

      153410238d01773e5c705c6d18955793bd61cb2e82c5c7656e74563bb43b3ffa

    • SHA512

      891b38c568d56325a51394c8676e9553534dc470b8272cdbe610ff530f63ca15b03436143f4af23141ef9580a9a90ec4d6fd1448ed5ec93130290de242162c4a

    • SSDEEP

      49152:0CEMb7Wdu21EpCPOzbGHYBLJ/Oys84q9rsljigY2a1WQOqvauFOJ+AIibJWhL9Bt:FXb/VUP2GHYBJOyI3l2WaUqCKYSKJLRE

    • Chameleon

      Chameleon is an Android banking trojan first seen in 2023.

    • Chameleon payload

    • Checks Android system properties for emulator presence.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Mobile v15

Tasks