fb316717892ce1a5236b1d22727e48d959a4e6f6264164e81ee60cd02ceb03c3 | Triage

Sharing

General

Target

fb316717892ce1a5236b1d22727e48d959a4e6f6264164e81ee60cd02ceb03c3.apk
Size

4.2MB
Sample

241105-1hesvaylav
MD5

9d27fd1802f804975df523bdca5e8b11
SHA1

4d3d6ce98fdd491f8c5f4ef63db5bdb86d0a9a3a
SHA256

fb316717892ce1a5236b1d22727e48d959a4e6f6264164e81ee60cd02ceb03c3
SHA512

31937cc4e9d3cf75b75d28e6d3e9ffcbd1156c10891a5e4b35d457eda024919d3556a5f3cf174bc12896adc58305d6fd6eb7e25e95fec85e1a356bb9ca62f1d4
SSDEEP

98304:eC7ckPA2J+YujH/Phl54pBClkRM4cu0LCrdfwW3:/7cUJkHhlSp8l/4cUwK

Score

8^/10

android banker discovery evasion execution persistence

Malware Config

Targets

- Target
  
  fb316717892ce1a5236b1d22727e48d959a4e6f6264164e81ee60cd02ceb03c3.apk
- Size
  
  4.2MB
- MD5
  
  9d27fd1802f804975df523bdca5e8b11
- SHA1
  
  4d3d6ce98fdd491f8c5f4ef63db5bdb86d0a9a3a
- SHA256
  
  fb316717892ce1a5236b1d22727e48d959a4e6f6264164e81ee60cd02ceb03c3
- SHA512
  
  31937cc4e9d3cf75b75d28e6d3e9ffcbd1156c10891a5e4b35d457eda024919d3556a5f3cf174bc12896adc58305d6fd6eb7e25e95fec85e1a356bb9ca62f1d4
- SSDEEP
  
  98304:eC7ckPA2J+YujH/Phl54pBClkRM4cu0LCrdfwW3:/7cUJkHhlSp8l/4cUwK
Score

8^/10

banker discovery evasion execution persistence
- Checks if the Android device is rooted.
  evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries information about active data network
  discovery
- Reads information about phone network operator.
  discovery
- Checks the presence of a debugger
  evasion
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

Persistence

Event Triggered Execution

Broadcast Receivers

Scheduled Task/Job

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

Security Software Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankerdiscoveryevasionexecutionpersistence

behavioral2

bankerdiscoveryevasionexecutionpersistence

behavioral3

bankerdiscoveryevasionexecutionpersistence