Overview

overview

7

Static

static

6

dfgrt12.apk

android-9-x86

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dfgrt12.apk

  • Size

    7.6MB

  • Sample

    240821-p17qsssemp

  • MD5

    8438b7b2652e51fd6dc94f13028078e8

  • SHA1

    9fa466509bb3ea888279d7a6c8e70e201e4c35d8

  • SHA256

    cea66e6222869e0f2b4f5a0ae51883756e3bca7b0618eeef3dd8f0070a3c7658

  • SHA512

    df21447280b65076506e062ba12ee5a97aff98d39db740e58c0f0d5ee8e1f759efbf3ffe01206ba9f209a194cc3cd6cae99d2d21e0389e6a2196f2614b4bf4c0

  • SSDEEP

    196608:f/pBo1AmP13wA3OaH3Wo19YDeAt7PoIxr2ONJq:f/DoOg333OI3TQB2Ixk

Score
7/10
androidbankercollectioncredential_accessdiscoveryevasion

Malware Config

Targets

    • Target

      dfgrt12.apk

    • Size

      7.6MB

    • MD5

      8438b7b2652e51fd6dc94f13028078e8

    • SHA1

      9fa466509bb3ea888279d7a6c8e70e201e4c35d8

    • SHA256

      cea66e6222869e0f2b4f5a0ae51883756e3bca7b0618eeef3dd8f0070a3c7658

    • SHA512

      df21447280b65076506e062ba12ee5a97aff98d39db740e58c0f0d5ee8e1f759efbf3ffe01206ba9f209a194cc3cd6cae99d2d21e0389e6a2196f2614b4bf4c0

    • SSDEEP

      196608:f/pBo1AmP13wA3OaH3Wo19YDeAt7PoIxr2ONJq:f/DoOg333OI3TQB2Ixk

    Score
    7/10
    bankercollectioncredential_accessdiscoveryevasion

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Acquires the wake lock

    • Queries information about active data network

      discovery

    • Requests accessing notifications (often used to intercept notifications before users become aware).

      collectioncredential_access

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

      evasion
    behavioral1

MITRE ATT&CK Mobile v15

Tasks