BankerSpanish.zip
- SHA256 f0d9d0e872347e343b600a8ff72f2926356fefedefc3cc6bfcf105bb6deb6757
Password
infected
Overview
overview
10Static
static
10BankerSpan...11.apk
android-9-x86
BankerSpan...11.apk
android-10-x64
BankerSpan...11.apk
android-11-x64
BankerSpan...ab.apk
android-9-x86
BankerSpan...ab.apk
android-10-x64
BankerSpan...ab.apk
android-11-x64
BankerSpan...41.apk
android-9-x86
BankerSpan...41.apk
android-10-x64
BankerSpan...41.apk
android-11-x64
Behavioral task
behavioral1
Sample
BankerSpanish/57f75ad95573f857fcfe13aaa3847511.apk
Resource
android-x86-arm-20240624-en
android-9-x86
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
BankerSpanish/57f75ad95573f857fcfe13aaa3847511.apk
Resource
android-x64-20240624-en
android-10-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
BankerSpanish/57f75ad95573f857fcfe13aaa3847511.apk
Resource
android-x64-arm64-20240624-en
android-11-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
BankerSpanish/92624244ee4834560efedb66224b16ab.apk
Resource
android-x86-arm-20240624-en
android-9-x86
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
BankerSpanish/92624244ee4834560efedb66224b16ab.apk
Resource
android-x64-20240624-en
android-10-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
BankerSpanish/92624244ee4834560efedb66224b16ab.apk
Resource
android-x64-arm64-20240624-en
android-11-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
BankerSpanish/f7793d6e66757aaf6b8af5b0abd4cf41.apk
Resource
android-x86-arm-20240624-en
android-9-x86
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
BankerSpanish/f7793d6e66757aaf6b8af5b0abd4cf41.apk
Resource
android-x64-20240624-en
android-10-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
BankerSpanish/f7793d6e66757aaf6b8af5b0abd4cf41.apk
Resource
android-x64-arm64-20240624-en
android-11-x64
0 signatures
150 seconds
General
- Target BankerSpanish.zip
- Size 5.5MB
- Sample240814-2yrysavgrn
- SHA256 f0d9d0e872347e343b600a8ff72f2926356fefedefc3cc6bfcf105bb6deb6757
- MD5 4cfdab0560c81ebed7e2c45fd73c01fb
- SHA1 e39edc87e4cf92a3985c1c8676c5d3d27c9abbf1
- SHA512 a3e3f59cd517dda0d69724b45933663637003c260707d65227992051786699bf0b1a7c64fd7cffd9c62f96d8e14461b39ee5c3fa026d1b8eb0c9ee5f0ef2779b
- SSDEEP 98304:2gnH7yA0BuRlKLtvUrwiDqTxGZsAUARe0nVURa8hwc8YFQfuw4UEWl4byu5:RH+ADLKLtvtiDKxGZsAc02R5wNmYwUVW
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- Irata family
- Irata payload 3 IoCs
resource yara_rule static1/unpack001/BankerSpanish/57f75ad95573f857fcfe13aaa3847511 family_irata4 static1/unpack001/BankerSpanish/92624244ee4834560efedb66224b16ab family_irata4 static1/unpack001/BankerSpanish/f7793d6e66757aaf6b8af5b0abd4cf41 family_irata4 - Declares services with permission to bind to the system 1 IoCs
description ioc Required by accessibility services to bind with the system. Allows apps to access accessibility features. android.permission.BIND_ACCESSIBILITY_SERVICE - Requests dangerous framework permissions 9 IoCs
description ioc Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW Required to be able to access the camera device. android.permission.CAMERA Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows an application to read SMS messages. android.permission.READ_SMS
File Explorer
-
BankerSpanish.zip.zip 5.5MB
-
BankerSpanish/57f75ad95573f857fcfe13aaa3847511.apk 2.0MB
-
BankerSpanish/92624244ee4834560efedb66224b16ab.apk 1.9MB
-
BankerSpanish/f7793d6e66757aaf6b8af5b0abd4cf41.apk 1.9MB
BankerSpanish/57f75ad95573f857fcfe13aaa3847511
- SHA256 d333fda60b5f62c61be6214e64fe79ee78c66bdd1f995736aeeb33cddc7494ea
- MD5 57f75ad95573f857fcfe13aaa3847511
- SHA1 06c78273196985b2c2a377624709c7a1a42bfe1f
- SHA512 45933fffed33fe3fd918be295e2de337c6cc06f18ac6c35c5c82d05513b90ab0d19fc133de9372be870acb705b306512e5969adf2627e07f93f79f8505553c4e
- SSDEEP 49152:W0wm8uToZIx+HmXzh0FDe2PLWXJdm+Mb3Zqw:bwFUoZIx1Y61Mb4w
- MD5 SHA1 SHA512 SSDEEP
-
Irata payload
es.adadda.ujd
.main
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.VIBRATE
android.permission.RECEIVE_SMS
android.permission.WAKE_LOCK
android.permission.BIND_ACCESSIBILITY_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.FOREGROUND_SERVICE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_NETWORK_STATE
android.permission.CAMERA
android.permission.READ_PHONE_STATE
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.WRITE_SETTINGS
android.permission.READ_CONTACTS
android.permission.CALL_PHONE
android.permission.READ_SMS
.main
android.intent.action.MAIN
.santandercl
.bcizim
.bbvaes
.economicoweb
.bcpboweb
.unimovelboweb
.fassilweb
.bisaweb
.santanderpt
.millelle
.fassimm
.activityruntimep
.verlaietivity
.starter
.bulacha
android.accessibilityservice.AccessibilityService
.httputils2service
.starter$starter_BR
android.intent.action.BOOT_COMPLETED
.bulacha$bulacha_BR
android.intent.action.BOOT_COMPLETED
.httputils2service$httputils2service_BR
BankerSpanish/92624244ee4834560efedb66224b16ab
- SHA256 c7e3cc7e5fc9a82f02939769b986f5c9ae3ed1b3a88fa24c2c26c7b1d042fb60
- MD5 92624244ee4834560efedb66224b16ab
- SHA1 1729594ac913508bd8083a36dbfe8bcee2096805
- SHA512 8a29cbcc9d33a0a7ea51c090a6212f86f83faf808277d4a18b467d7022394a1a31655489a5ad93318ee2a4ac3785c2eeab5b2d90f89b6a64f3d43cb15e7d98fc
- SSDEEP 49152:e0wmpuToZIx+HmXrKRbGaGwSSRhPqvzq0zFU1B/cP:Dw4UoZIx1bdqvRF4F0BI
- MD5 SHA1 SHA512 SSDEEP
-
Irata payload
es.adadda.ujd
.main
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.VIBRATE
android.permission.RECEIVE_SMS
android.permission.WAKE_LOCK
android.permission.BIND_ACCESSIBILITY_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.FOREGROUND_SERVICE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_NETWORK_STATE
android.permission.CAMERA
android.permission.READ_PHONE_STATE
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.WRITE_SETTINGS
android.permission.READ_CONTACTS
android.permission.CALL_PHONE
android.permission.READ_SMS
.main
android.intent.action.MAIN
.santanderpt
.santandercl
.bcizim
.millelle
.fassimm
.webview
.bbvaes
.activityruntimep
.verlaietivity
.starter
.bulacha
android.accessibilityservice.AccessibilityService
.httputils2service
.starter$starter_BR
android.intent.action.BOOT_COMPLETED
.bulacha$bulacha_BR
android.intent.action.BOOT_COMPLETED
.httputils2service$httputils2service_BR
BankerSpanish/f7793d6e66757aaf6b8af5b0abd4cf41
- SHA256 95c25547034a532f8cada4220213e190d479d12d481ece3b160ee086cb9d26f1
- MD5 f7793d6e66757aaf6b8af5b0abd4cf41
- SHA1 abc991ff874a3c0666195176d1ca5befc70641d8
- SHA512 cc83d53bc92dde2494f80b7dc6e313103332838b06735cc87d854a92de2532631b1f6a9d388db7c206252c288282de24adfe93c01214d4354a999cfad36f022b
- SSDEEP 49152:A0wm8uToZIx+HmXURox/kVa6xYpFAwzzVFV1nxZXL:dwFUoZIx1kyx/kZYpF7zRF7xZXL
- MD5 SHA1 SHA512 SSDEEP
-
Irata payload
es.adadda.ujd
.main
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.VIBRATE
android.permission.RECEIVE_SMS
android.permission.WAKE_LOCK
android.permission.BIND_ACCESSIBILITY_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.FOREGROUND_SERVICE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.ACCESS_NETWORK_STATE
android.permission.CAMERA
android.permission.READ_PHONE_STATE
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.ACCESS_NOTIFICATION_POLICY
android.permission.WRITE_SETTINGS
android.permission.READ_CONTACTS
android.permission.CALL_PHONE
android.permission.READ_SMS
.main
android.intent.action.MAIN
.santandercl
.santanderpt
.bcizim
.millelle
.fassimm
.fassilweb
.bbvaes
.activityruntimep
.verlaietivity
.starter
.bulacha
android.accessibilityservice.AccessibilityService
.httputils2service
.starter$starter_BR
android.intent.action.BOOT_COMPLETED
.bulacha$bulacha_BR
android.intent.action.BOOT_COMPLETED