chameleon | b8ea74902684dcced62a5ca2c1d6932659decfefcbdb2615bfe5899e05eb1451

Resubmissions

06/09/2024, 14:29

240906-rtlwvs1drr 6

06/09/2024, 14:08

06/09/2024, 13:40

06/09/2024, 13:39

28/08/2024, 15:20

28/08/2024, 13:31

06/08/2024, 09:54

06/08/2024, 09:51

Analysis

max time kernel
7s
max time network
1013s
platform
android_x64
resource
android-33-x64-arm64-20240624-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
submitted
28/08/2024, 15:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

xecvbzvspk.apk
Size

3.7MB
MD5

36906c0fbc3a4b2044b1efc75071c567
SHA1

78219736bf46b4fd3535b914f928e408b34c3911
SHA256

ddd40c0a5813b8e9bb72e004bc10799ec10068e909713c6542e88ef95100ab9c
SHA512

80fdb89d7a0aaeefc9ee4d615dd4263f7d830902296850ff5b12fb87e53d486a317634734023349da018e1b6f4b35bb35cc6306eeca333b5fe3d9dc01add6fa6
SSDEEP

98304:kWy+uJvQHIhObEuo07R31xJ/nNw0rCg+EVINNM:k+bHIh0EQT1lCgn6NM

Score

10^/10

chameleon banker evasion impact infostealer trojan

Malware Config

Signatures

Chameleon
Chameleon is an Android banking trojan first seen in 2023.
trojan infostealer banker chameleon

Chameleon payload 1 IoCs

resource	yara_rule
behavioral4/memory/4376-0.dex	family_chameleon

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.wrap.jump/app_foot/eLP.json	4376	com.wrap.jump
/data/user/0/com.wrap.jump/app_foot/eLP.json	4376	com.wrap.jump

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.wrap.jump

com.wrap.jump
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4376

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact