triada | 329ccadb1f5a9027f7c85061cb5d2137343749f585120ce339e437ef2ccd18f9 | Triage

Resubmissions

15-09-2024 13:05

240915-qbk16swaqk 10

11-08-2024 03:45

240811-ebk6dstdrq 6

10-08-2024 18:57

240810-xlxahssgrj 10

Sharing

General

Target

whatsapp_Plus_17.85_whatsapplus.org.apk
Size

114.8MB
Sample

240915-qbk16swaqk
MD5

56ccacc70ccc328698edc296e183e9c8
SHA1

5c9bfdd00ae326c766611ed26770a1fd4acff73a
SHA256

329ccadb1f5a9027f7c85061cb5d2137343749f585120ce339e437ef2ccd18f9
SHA512

accbf2510ff0eb3dada21a001c5fc1eb8f66e9583ee270745eecfc9262d6adf120de38ec6feecd1ac188cdcb52babf8d54803ab9464729585d16f1f49a1666b6
SSDEEP

1572864:df3YFq69wcVm6+i5AEhKr+4QDuUaJRKfyMuK0aPKIUsqGM7UgolqKWG40rAIZBS/:dvYFHnKbEQWsGXuK0EHMJGWp0fZMd1

Score

10^/10

triada android banker evasion infostealer trojan

Malware Config

Targets

- Target
  
  whatsapp_Plus_17.85_whatsapplus.org.apk
- Size
  
  114.8MB
- MD5
  
  56ccacc70ccc328698edc296e183e9c8
- SHA1
  
  5c9bfdd00ae326c766611ed26770a1fd4acff73a
- SHA256
  
  329ccadb1f5a9027f7c85061cb5d2137343749f585120ce339e437ef2ccd18f9
- SHA512
  
  accbf2510ff0eb3dada21a001c5fc1eb8f66e9583ee270745eecfc9262d6adf120de38ec6feecd1ac188cdcb52babf8d54803ab9464729585d16f1f49a1666b6
- SSDEEP
  
  1572864:df3YFq69wcVm6+i5AEhKr+4QDuUaJRKfyMuK0aPKIUsqGM7UgolqKWG40rAIZBS/:dvYFHnKbEQWsGXuK0EHMJGWp0fZMd1
Score

10^/10

triada banker evasion infostealer trojan
- Android Triada payload
- Triada
  Triada is an Android banking trojan first seen in 2016.
  trojan infostealer banker triada
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
behavioral1 behavioral2

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

triadabankerevasioninfostealertrojan

behavioral2