2fef1a446aca4cf2916a2e4a504b273939192d47e271e05f0b47ecb86ba9f1f3 | Triage

Sharing

General

Target

Ewano.apk
Size

6.9MB
Sample

240522-plkbysba61
MD5

386620284bdcd6a8eb6086e35eeece70
SHA1

32e6cb44be35ad44537559925d39677e4c232125
SHA256

2fef1a446aca4cf2916a2e4a504b273939192d47e271e05f0b47ecb86ba9f1f3
SHA512

6d20f741548d10e3cedccdde05bad56aedf9648bf635e30fb30d88e6f33ddce9a8ac0b04bae1b262edb3dc5741ec79da51ed8bdead4efa798cfe6b69d9473239
SSDEEP

98304:AWiQTgAfDvDRg/4NErvCdJ/7Cv4zXQGMEUP0r8hEjqa7BzrPiXrU9+7EfriQkmD:3iQTRfbDQyWvgMxWT7BybUxZD

Score

8^/10

android banker discovery evasion impact

Malware Config

Targets

- Target
  
  Ewano.apk
- Size
  
  6.9MB
- MD5
  
  386620284bdcd6a8eb6086e35eeece70
- SHA1
  
  32e6cb44be35ad44537559925d39677e4c232125
- SHA256
  
  2fef1a446aca4cf2916a2e4a504b273939192d47e271e05f0b47ecb86ba9f1f3
- SHA512
  
  6d20f741548d10e3cedccdde05bad56aedf9648bf635e30fb30d88e6f33ddce9a8ac0b04bae1b262edb3dc5741ec79da51ed8bdead4efa798cfe6b69d9473239
- SSDEEP
  
  98304:AWiQTgAfDvDRg/4NErvCdJ/7Cv4zXQGMEUP0r8hEjqa7BzrPiXrU9+7EfriQkmD:3iQTRfbDQyWvgMxWT7BybUxZD
Score

8^/10

banker discovery evasion impact
- Checks if the Android device is rooted.
  evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Acquires the wake lock
- Checks if the internet connection is available
  discovery
- Checks the presence of a debugger
  evasion
behavioral1 behavioral2

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

Software Discovery

Security Software Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

bankerdiscoveryevasionimpact

behavioral2

bankerdiscoveryevasionimpact