Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
158s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
09/11/2024, 22:03
Behavioral task
behavioral1
Sample
babf62153de34767e43eb56676a46f07c71f0bc0025de48762d3f443f6b1c02d.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
babf62153de34767e43eb56676a46f07c71f0bc0025de48762d3f443f6b1c02d.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
babf62153de34767e43eb56676a46f07c71f0bc0025de48762d3f443f6b1c02d.apk
-
Size
3.2MB
-
MD5
f0e84429ebd26a8aaeae85c1be529cab
-
SHA1
63a9965bd4c70b1322b9058b8ba9f8ed8a91f48f
-
SHA256
babf62153de34767e43eb56676a46f07c71f0bc0025de48762d3f443f6b1c02d
-
SHA512
5651e119e8139b761129e3eb820224f9fbad65375657846b0383881ff33c268b23b4feddae0466ab7bc5e45bb2a6e7cf70b767e8bdbc43a2ff05420459558ece
-
SSDEEP
98304:ZrvJp3OSejUYfbovEJYZfM7r0dLrrgwdjAc3n8bcrP:tvJJfeQifkdLXTl84P
Malware Config
Extracted
octo
https://87.120.115.219:7117/gate/
https://87.120.115.219:8080/gate/
-
target_apps
com.google.android.apps.messaging
at.spardat.bcrmobile
at.spardat.netbanking
com.bankaustria.android.olb
com.android.messaging
com.bmo.mobile(英文)
com.cibc.android.mobi
com.rbc.mobile.android的
com.scotiabank.mobile(丰业银行手机)
com.td
cz.airbank.android
eu.inmite.prj.kb.mobilbank
com.bankinter.launcher (英语)
com.kutxabank.android
com.rsi
com.bbva.bbvacontigo
com.android.chrome的
com.akbank.android.apps.akbank_direkt
com.denizbank.mobildeniz
com.finansbank.mobile.cepsube
com.garanti.cepsubesi
com.ingbanktr.ingmobil
com.kuveytturk.mobil
com.paribu.app
com.pozitron.iscep
com.teb(英语:com.teb)
com.tmobtech.halkbank(英语:com.tmobtech.halkbank)
com.vakifbank.mobile(移动版)
com.ykb.android
com.ziraat.ziraatmobil
finansbank.enpara (英语)
com.aktifbank.nkolay(阿克蒂夫银行.nkolay)
com.albarakaapp
com.anadolubank.android
com.binance.dev
com.btcturk.pro
com.cloud.tr
com.facebook.katana(卡塔纳脸书)
com.fibabanka.fibabanka.mobile(菲巴银行.菲巴银行.移动电话)
com.google.android.gm
com.ininal.wallet
com.intertech.mobilemoneytransfer.activity(英文)
com.isbank.isyerim
com.magiclick.odeabank(英语:com.magiclick.odeabank)
com.microsoft.office.outlook
com.mobillium.papara
com.pttfinans(英语:com.pttfinans)
com.teb.kurumsal
com.tfkb的
com.vakifkatilim.mobil
com.ziraatkatilim.mobilebanking
finansbank.enpara.sirketim
tr.com.abank.dijital
tr.com.hsbc.hsbc土耳其
tr.com.param.android
tr.gov.turkiye.edevlet.kapisi
trendyol.com
com.tecnocom.cajalaboral(英语:com.tecnocom.cajalaboral)
es.bancopopular.nbmpopular(英语:es.bancopopular.nbmpopular)
es.evobanco.班卡莫维尔
es.lacaixa.mobile.android.newwapicon
com.dbs.hk.dbsm银行
com.hangseng.rbmobile(恒生.rbmobile)
com.mtel.androidbea
com.scb.breezebanking.hk
hk.com.hsbc.hsbchk流动理财
com.aff.otpdirekt
com.ideomobile.hapoalim(英语:com.ideomobile.hapoalim)
com.infrasofttech.indianbank(印度银行)
com.mobikwik_new
com.oxigen.oxigen钱包
jp.co.aeonbank.android.passbook
jp.co.netbk(英语:jp.co.netbk)
jp.co.rakuten_bank.乐天银行
jp.co.sevenbank.AppPassbook(英语:jp.co.sevenbank.AppPassbook)
jp.co.smbc.direct(英语:jp.co.smbc.direct)
jp.mufg.bk.applisp.app
com.barclays.ke.mobile.android.ui
nz.co.anz.android.mobilebanking
nz.co.asb.asbmobile
nz.co.bnz.droid银行
nz.co.kiwibank.mobile
getingroup.mobilebanking
eu.eleader.mobilebanking.pekao.firm
eu.eleader.mobilebanking.pekao
eu.eleader.mobilebanking.raiffeisen
pl.bzwbk.bzwbk24
pl.ipko.mobile(英语:pl.ipko.mobile)
pl.mbank银行
alior.bankingapp.android
com.comarch.mobile.banking.bgzbnpparibas.biznes
com.comarch.security.mobilebanking
com.empik.empikapp
com.empik.empikfoto
com.finanteq.finance.ca
com.orangefinansek
eu.eleader.mobilebanking.invest
pl.aliorbank.aib
pl.bosbank.mobile(移动端)
pl.bps.bankowoscmobilna
pl.bzwbk.ibiznes24
pl.bzwbk.mobile.tab.bzwbk24
pl.com.rossmann.centauros
pl.fmbank.smart(英语:pl.fmbank.smart)
pl.ideabank.手机银行
pl.ing.mojeing
pl.millennium.corpApp
pl.orange.mojeorange
pl.pkobp.iko
pl.pkobp.ipkobiznes
com.pozitron.albarakaturk
ccom.tmob.denizbank
com.tmob.tabletdeniz
com.vakifbank.mobilel
tr.com.sekerbilisim.mbank
wit.android.bcpBankingApp.millenniumPL
com.idamobile.android.hcb
logo.com.mbanking
com.openbank(开放银行)
com.google.android.apps.walletnfcrel
com.samsung.android.spay
com.cardsapp.android的
cz.bsc.rc
cb.ibank银行
com.bifit.mobile.ubrr
com.bssys.mbcphone.ubrir
净.bl
com.bifit.mobile.bin
com.webmoney.my
com.polehin.android
com.bitcoin.mwallet
io.totalcoin.wallet
com.quppy
com.sharpdev.fxcoin(英文)
com.advantage.Raiffeisen银行
hr.asseco.android.jimba.mUCI.ro
may.maybank.android (英语)
ro.btrl.移动
com.amazon.mShop.android.s跳跃(亚马逊.mShop.android.shopping)
com.ebay.移动
com.idamob.tinkoff.android
com.akbank.android.apps.akbank_direkt_tablet
com.akbank.softotp
com.akbank.android.apps.akbank_direkt_tablet_20
com.fragment.akbank(英文)
com.ykb.android.mobilonay
com.ykb.avm
com.ykb.androidtabl等等
com.veripark.ykbaz(英语:com.veripark.ykbaz)
com.softtech.iscek
com.yurtdisi.iscep
com.softtech.isbankasi
com.monitise.isbank莫斯科
com.magiclick.FinansPOS公司
com.matriksdata.finansyatirim
com.vipera.ts.starter.QNB
com.redrockdigimark
com.garanti.cepbank(英语:com.garanti.cepbank)
com.garantibank.cepsubesiro
biz.mobinex.android.apps.cep_sifrematik
com.garantiyatirim.fx
eu.newfrontier.iBanking.mobile.Halk.零售
tr.com.tradesoft.tradingsystem.gtpmobile.halk
com。DijitalSahne.EnYakinHalkbank
com.ziraat.ziraattablet
com.matriksmobile.android.ziraatTrader
com.matriksdata.ziraatyatirim.pad
de.ingdiba.bankingapp
de.comdirect.android
de.commerzbanking.mobil
de.consorsbank银行
com.db.mm.德意志银行
de.dkb.portalapp
com.de.dkb.portalapp
com.ing.diba.mbbr2
de.postbank.finanzassistent
mobile.santander.de
de.fiducia.smartphone.android.banking.vr
fr.creditagricole.androidapp
fr.axa.monaxa(莫纳萨)
fr.banquepopulaire.cyberplus
网.bnpparibas.mescomptes
com.boursorama.android.clients
com.caisseepargne.android.mobilebanking
fr.lcl.android.customer区域
com。PayPal.android.p2pmobile
com.wf.wellsfargomobile
com.wf.wellsfargomobile.tablet
com.wellsFargo.ceomobile公司
com.usbank.mobilebanking
com.usaa.mobile.android.usaa(移动版.android.usaa)
com.suntrust.mobilebanking
com.moneybookers.skrillpayments.neteller
com.moneybookers.skrillpayments(com.moneybookers.skrillpayments)
com.clairmail.fth
com.konylabs.capitalone(科尼实验室.capitalone)
com.yinzcam.facilities.verizon(英语:com.yinzcam.facilities.verizon)
com.chase.sig.android
com.infonow.bofa
com.bankofamerica.cashpromobile(美国银行)移动版
uk.co.bankofscotland.businessbank
com.grppl.android.shell.BOS
com.rbs.mobile.android.natwestoffshore
com.rbs.mobile.android.natwest(英语:com.rbs.mobile.android.natwest)
com.rbs.mobile.android.natwestbandc
com.rbs.mobile.investisir
com.phyder.engage网站
com.rbs.mobile.android.rbs
com.rbs.mobile.android.rbsbandc
uk.co.桑坦德德.桑坦德英国
uk.co.santander.businessUK.bb
com.sovereign.桑坦德
com.ifs.banking.fiid4202
com.fi6122.godough
com.rbs.mobile.android.ubr
com.htsu.hsbcpersonalbanking(汇丰个人银行)
com.grppl.android.shell.哈利法克斯
com.grppl.android.shell.CMBlloydsTSB73
com.barclays.android.barclaysmobilebanking
com.unionbank.ecommerce.mobile.android
com.unionbank.ecommerce.mobile.commercial.legacy
com.snapwork.IDBI的
com.idbibank.abhay_card
src.com.idbi
com.idbi.mpassbook
com.ing.移动
com.snapwork.hdfc
com.sbi.SBIFreedomPlus
hdfcbank.hdfcquickbank
com.csam.icici.bank.imobile
in.co.bankofbaroda.mpassbook
com.轴.移动
cz.csob.smartbanking
sk.sporoapps.accounts
sk.sporoapps.skener
com.cleverlance.csas.servis24
org.westpac.bank(西太平洋银行)
au.com.suncorp.SuncorpBank(新科普银行)
org.stgeorge.bank(圣乔治银行)
org.banksa.银行
au.com.newcastle永久
au.com.nab.mobile
au.com.mebank.banking
au.com.ingdirect.android
MyING.be
com.imb.银行业务2
com.fusion.ATMLocator
au.com.cua.mb
com.commbank.netbank(通讯银行网)
com.citibank.mobile.au
com.citibank.mobile.uk
com.citi.citimobile(花旗移动)
org.bom.银行
com.bendigobank.mobile(本迪戈银行.移动版)
me.doubledutch.hvdnz.cbnationalconference2016
au.com.bankwest.mobile
com.bankofqueensland.boq(昆士兰银行.boq)
com.anz.android.gomoney(安卓货币)
com.anz.android的
com.anz.Singapore数字银行
com.anzspot.mobile(英文)
com.crowdcompass.appSQ0QACAcYJ
com.arubanetworks.atmanz
com.quickmobile.anzirevents15
at.volksbank.volksbankmobile
它.volksbank。人造人
it.secservizi.mobile.atime.bpaa
de.fiducia.smartphone.android.securego.vr
com.isis_papyrus.raiffeisen_pay_eyewdg
网址:easybank.mbanking
在.easybank.tablet
at.easybank.securityapp
at.bawag.m银行
com.bawagpsk.securityapp
at.psa.app.bawag
com.pozitron.vakifbank(英语:com.pozitron.vakifbank)
com.starfinanz.smob.android.sfinanz状态
com.starfinanz.mobile.android.pushtan
com.entersekt.authapp.sparkasse
com.starfinanz.smob.android.sfinanzstatus.tablet
com.sta的rfinanz.smob.android.sbanking(英语:rfinanz.smob.android.sbanking)
com.palatine.android.mobilebanking.prod
fr.laposte.lapostemobile
com.cm_prod.bad
com.cm_prod.epasal
com.cm_prod_tablet.bad
com.cm_prod.nosactus
手机.societegenerale.mobile.lappli
com.bbva.netcash现金
com.bbva.bbva钱包
es.bancosantander.apps(英语:es.bancosantander.apps)
com.santander.app
es.cm.android
es.cm.android.tablet
com.bankia.wallet
百思买.android
com.jiffyondemand.user
com.latuabancaperandroid
com.latuabanca_tabperandroid
com.lynxspa.bancopopolare
com.unicredit(联合信贷)
it.bnl.apps.banking
it.bnl.apps.enterprise.bnlpay
it.bpc.proconl.mbplus
it.copergmps.rt.pf.android.sp.bmps
it.gruppocariparma.nowbanking
it.ingdirect.app
它.nogood.container
it.popso.SCRIGNOapp
posteitaliane.posteapp.apppostepay
com.abnamro.nl.mobile.payments(移动支付)
com.triodos.bankingnl
nl.asnbank.asnbankieren
nl.snsbank.mobielbetalen
com.btcturk
com.tmob.denizbank(英语:com.tmob.denizbank)
com.att.my 无线
com.vzw.hss.myverizon(英文)
aib.ibank.android
com.bbnt
com.csg.cs.dnmbs
com.discoverfinancial.mobile(发现金融.移动)
com.eastwest.mobile(东西手机)
com.fi6256.godough
com.fi6543.godough
com.fi6665.godough
com.fi9228.godough
com.fi9908.godough
com.ifs.banking.fiid1369
com.ifs.mobilebanking.fiid3919
com.jackhenry.rockvillebankct
com.jackhenry.washingtontrustbankwa
com.jpm.sig.android
com.sterling.onepay(英镑.onepay)
com.svb.mobilebanking
org.usemployees.mobile(组织.usemployees.mobile)
pinacleMobileiPhoneApp.android
com.fuib.android.spot.online
com.ukrsibbank.client.android
eu.unicreditgroup.hvbapptan
com.targo_prod.bad
com.db.pwcc.dbmobile
com.db.mm.norisbank
com.bitmarket.trader
com.plunien.poloniex
com.菌丝体钱包
com.bitfinex.bfxapp
com.binance.od应用程序
com.blockfolio.blockfolio
com.crypter.cryptocyrrency
io.getdelta.android
com.edsoftapps.mycoinsvalue(com.edsoftapps.mycoinsvalue)
com.coin.profit(com.coin.profit)
com.mal.saul.coinmarketcap(com.mal.saul.coinmarketcap)
com.tnx.apps.coinportfolio
com.coinbase.android的
com.portfolio.coinbase_tracker
com.bitpay.wallet
com.bitcoin.wallet.btc
com.blocktrail.mywallet
org.electrum.electrum
com.paxful.wallet
com.bitcoin.pocketbook.btc
net.bitstamp.app
de.schildbach.wallet
piuk.blockchain.android
info.blockchain.merchant
com.jackpf.blockchain搜索
com.unocoin.unocoin钱包
com.unocoin.unocoinmerchantPoS
com.thunkable.android.santoshmehta364.UNOCOIN_LIVE
wos.com.zebpay
com.localbitcoinsmbapp
com.thunkable.android.manirana54.LocalBitCoins
com.thunkable.android.manirana54.LocalBitCoins_unblock
com.localbitcoins.exchange
com.coins.bit.local
com.coins.ful.bit
com.jamalabbasii1998.localbitcoin
xmr.org.freewallet.app
com.bitcoin.ss.zebpay印度
com.kryptokit.jaxx
com.cajasur.android
app.wizink.es
com.grupocajamar.wefferent
caixagalicia.activamovil
com.abanca.bancaempresas(英语:com.abanca.bancaempresas)
net.inverline.bancosabadell.officelocator.android
es.caixageral.caixageralapp
com.bankinter.bk钱包
com.db.pbc.mibanco
com.indra.itecban.mobile.novobanco
es.openbank.mobile(英语:es.openbank.mobile)
es.pibank.客户
es.bancosantander.empresas(英语:es.bancosantander.empresas)
com.indra.itecban.triodosbank.mobile.banking
es.univia.unicajamovil
com.westernunion.moneytransferr3app.es
网址:www.ingdirect.nativeframe
com.bancsabadell.wallet
com.bankinter.empresas(com.bankinter.empresas)
com.imaginbank.app
es.ceca.cajalnet(英语:es.ceca.cajalnet)
es.ibercaja.ibercajaapp
es.liberbank.cajasturapp
gt.com.bi.bienlinea
ae.ahb.数字
ae.almasraf.mobileapp
ae.hsbc.hsbcuae
air.app.scb.breeze.android.main.my.prod
air.com.inversis.Andbank智能手机
app.alansari(阿兰萨里)
app.indie.my
app.wizink.pt
ar.bapro
ar.com.bcopatagonia.android
ar.com.redlink.custom
ar.com.santander.rio.mbanking银行
ar.宏
at.erstebank.george
at.ing.diba.client.onlinebanking
at.rsg.pfp
au.com.amp.myportfolio.android
au.com.commbank.commbiz.prod
au.com.hsbc.hsBC澳大利亚
au.com.macquarie.authenticator
au.com.macquarie.banking
au.com.pnbank.android
au.com.rams.RAMS
au.com.suncorp.marketplace
au.com.suncorp.rsa.suncorpsecurededauau.com.suncorp.suncorpsecuredauau.com.suncorp.sun.com.suncostious.cn
au.com.ubank.internetbanking
be.argenta.bankieren
be.axa.mobilebanking
be.belfius.directmobile.android
br.com.bradesco.next
br.com.intermedium
br.com.modalmais
br.com.original.bank
br.com.uol.ps.myaccount
ca.affinitycu.mobile
ca.bnc.android
ca.hsbc.hsbccanada
ca.manulife.MobileGBRS公司
ca.mobile.explorer(移动浏览器)
ca.motusbank.mapp(英语:ca.motusbank.mapp)
ca.pcfinancial.bank(ca.pcfinancial.bank)
ca.servus.mbanking银行
ca.tangerine.clients.banking.app
cc.bitbank.bitbank(比特银行)
cgd.pt.caixadirectaparticulares
ch.autoscout24.autoscout24
cl.android
cl.bancochile.mbanking银行
clientapp.swiftcom.org
co.bitx.android.wallet
co.com.bancoagrario.icbanking
co.com.bancofalabella.mobile.omc
co.com.bbva.mb
co.edgesecure.app
co.mona.android
co.uk.Nationwide.Mobile公司
co.zip
com。BankAlBilad.Enjaz应用程序
com。FNBPA.手机银行
com。IndianBank.IndOASIS公司
com。MBSB。银行.移动.银行
com。MizrahiTefahot.nh
com.a2a.android.burgan
com.aadhk.woinvoice
com.aaib
com.abanca.bm.pt
com.acceltree.mtc.screens
com.accessbank.accessbankapp
com.adcb.银行
com.adcb.cbgdigi
com.adcb.simply生活
com.adib.mobile(移动通信)
com.ahlibank.个人
com.airbitz(美国交易所)
com。Airbnb.android
com.alahli.mobile.android
com.alahli.quickpay
com.alibaba.intl.android.apps.poseidon(阿里巴巴.intl.android.apps.poseidon)
com.alinma.retail.mobile
com.alliance.AOPMobileApp
com.alloapp.yump
com.ally.手机银行
com.alrajhibank.mobile网站
com.alrajhiretailapp
com.amazon.sellermobile.android
com.ambank.ambank在线
com.americanexpress.android.acctsvcs.us
com.amx.amxremit
com.anabatic.canadia
com.android.vending
com.anz.trans
com.aol.mobile.aolapp
com.app.ecobank
com.appfactory.tmb
com.arabbank.arabimobilev2
com.arkea.android.application.cmb
com.arkea.android.application.cmso2
com.asseco.hybrid.bos.prod
com.aswat.carrefouruae
com.atb.ATB移动
com.atb.business移动
com.aub.mobilebanking.kw.phone
com.axabanque.fr
com.azimo.sendmoney(发送钱)
com.bancocajasocial.geolocation
com.bancodebogota.bancamovil
com.bancode委内瑞拉.bdv数字
com.bancomer.mbanking
com.bancorpsouth.android
com.banesco.samfbancamovilunificada
com.baninter
com.bankfab.pbg.ae.dubaifirst(迪拜第一银行fab.pbg.ae.dubaifirst)
com.bankinter.portugal.bmb
com.bankofbaroda.mconnect(com.bankofbaroda.mconnect)
com.巴克莱卡杜斯
com.base.bankalfalah
com.bawagpsk.bawagpsk
com.bbt.myfi(英语:com.bbt.myfi)
com.bbva.GEMA公司
com.bbva.mobile.pt
com.bbva.nxt_peru
com.bca.halobca.android
com.bca公司
com.bcp.bank.bcp
com.beobank_prod.bad
com.bitfinex.mobileapp
com.bitpanda.bitpanda
com.bittrex.trade(比特特雷克斯贸易)
com.bmoharris.digital(英文)
com.bnc.金融
com.bnhp.payments.paymentsapp(com.bnhp.payments.paymentsapp)
com.bnpp 中。易理财(易邮银行)
com.bochk.com
com.boi.mpay(英语:com.boi.mpay)
com.booking(预订)
com.botw.mobilebanking
com.boubyanapp.boubyan.bank(英语:com.boubyanapp.boubyan.bank)
com.brodnica.hybrid.app
com.bsm.活动2
com.bsnebiz.cdb
com.bybit.app
com.caisse.epargne.android.tablette
com.cajaingenieros.android.bancamovil
com.cajasiete.android.cajasietereport(com.cajasiete.android.cajasietereport)
com.canarabank.mobility
com.cbd.移动
com.cbk.手机银行
com.cbq.CB移动
com.cedarplus.agro
com.changelly.app
com.cic_prod.bad
com.cimbmalaysia
花旗手机.ccc.com.citi.mobile.ccc
com.citibanamex.banamex移动
com.citibank.花旗银行MY
com.citibank.mobile.citiuaePAT
com.citibank.mobile.sg
com.citizensbank.androidapp
com.coastcapitalsavings.dcu(英语:com.coastcapitalsavings.dcu)
com.compasssavingsbank.mobile(指南针投资银行.移动版)
com.connectivityapps.hotmail
com.cooperativebank.bank(合作银行银行)
com.coppel.coppelapp
com.creditandorra
com.current。应用程序
com.danskebank.mobilebank3.dk
com.戴夫
com.db.mobilebanking
com.db.pbc.DBPay
com.db.pbc.miabanca
com.dbs.sg.dbsm银行
com.dbs.sg.posbmbanking银行
com.debitoor.android
com.desjardins.mobile(英文)
com.dhanlaxmi.dhansmart.mtc
com.dib.app
com.douugh.douughapp(杜格.杜格应用)
com.easybank.易灵银行
com.ebos.bos网站
com.electroneum.mobile(电子网.mobile)
com.emiratesnbd.android
com.engage.pbb.pbengage2my.release
com.enjin.mobile.wallet
com.eofinance财经
com.eqbank.eqbank(英语:com.eqbank.eqbank)
com.etisalat.电子钱包
com.etrade.mobilepro.活动
com.everis.bsa_1_3
com.exictos.mbanka.bic
com.exmo网站
com.fab.personalbanking
com.fedmobile的
com.feib.appbank(英语:com.feib.appbank)
com.fh.发薪日
com.fi7026.godough
com.fibabanka.mobile(com.fibabanka.mobile)
com.fibi.nativeapp
com.finanteq.finance.bgz(金融.bgz)
com.finshell.fin
com.firstbank.firstmobile(第一银行.firstmobile)
com.fordeal.android
com.fortuneo.android
com.friendipay.app
com.fss.indus
com.fss.iob6
com.fullsix.android.labanquepostale.account访问
com.fusion.banking
com.fusion.beyondbank(超越银行)
com.ge.capital.konysbiapp
com.gemini.android.app
com.globe.gcash.android
com.gmowallet.mobilewallet
com.goodbarber.ybrmalaysia
com.google.android.apps.nbu.paisa.user
com.google.android.gm.lite
com.google.android.youtube
com.greater.greater
com.grupoavalav1.bancamovil
com.grupoavaloc1.bancamovil
com.hittechsexpertlimited.hitbtc
com.hsbc.hsbcnet
com.亨廷顿网
com.huobionchainwallet.gp
com.icomvision.bsc.待定
com.ics.nl.icscards
com.icsfs.jkb
com.ideomobile.discount
com.idfcfirstbank.optimus
com.ie.capitalone.uk
com.iexceed.CBS公司
com.iexceed.appzillon.ippbMB
com.imo.android.imoim
com.imo.android.imoimbeta
com.imo.android.imoimhd
com.infosys.alh
com.infrasoft.uboi
com.infrasofttech.中央银行
com.infrasofttech.MahaBank(马哈班克)
com.instagram.android的
com.interswitchng.www
com.isis_papyrus.hypo_pay_eyewdg
com.itau.empresas(英语:com.itau.empresas)
com.itau网站
com.jago.digital银行
com.kakaobank.channel(卡考银行)渠道
com.karwatechnologies.karwataxi
com.kasikorn.retail.mbanking.wap
com.kbc.mobile.android.phone.kbc
com.key.android的
康德基.kwt
com.kfc.me
com.肯德基.卡塔尔
com.kfh.kfh在线
com.konylabs.HongLeong连接
com.konylabs.cbplpat
com.kraken.trade(海妖交易)
com.krungsri.kma(英语:com.krungsri.kma)
com.kubi.kucoin(库比.库币)
com.kudabank.app
com.kwt.hardeesburger.fastfood(英语:com.kwt.hardeesburger.fastfood)
com.leumi.leumiwallet
com。LinkedIn.android
com.liv.android的
com.lulu.commerce网站
com.lumiwallet.android
com.mail.mobile.android.mail(移动安卓邮件)
com.mashreq.NeoApp
com.mbanking.阿治曼银行
com.mbankuae.amcb
com.mbc.anb.密钥库
com.mcom.第一公民
com.mediolanum.android.fullbanca
com.mediolanum
com.meetalbert
com.mercadolibre
com.mercadopago.wallet
com.子午线.android
com.mfou(英文)ndry.mb.android.mb_136
com.mifel.mobile.activity
com.mobikwik_new.bajajfinserv
com.mobileloft.alpha.droid
com.mobillium.btcturk
com.mobius.mobilebank.cartu
com.moneylion
com.mootwin.natixis
com.morabanc.mobileapp
com.morganstanley.clientmobile.prod
com.movocash.movo
com.msf.kbank.移动
com.mtb.mbanking.sc.retail.prod
com.myc3card.app
com.namshi.android
com.navyfederal.android
com.nbk.IBG移动端
com.nearform.ptsb
com.netflix.mediaclient
com.netvariant.alkhaliji
com.noon.buyerapp
com.nuance.nmc.sihome.metropcs
com.ocbc.mobile(华侨银行手机)
com.ocbc.mobilemy
com.ocito.cdn.activity.banquelaydernier
com.ocito.cdn.activity.creditdunord
com.ofss.gbkprodret
com.okinc.okcoin.intl
com.okinc.okex.gp
com.opensooq.OpenSooq
com.oryx.snoonu
com.payeer公司
com.payoneer.android
com.pcb.mydirect(com.pcb.mydirect)
com.pcfinancial.mobile(英文)
com.pizzahutapp(必胜饼应用)
com.pnc.ecommerce.mobile
com.pozitron.qib(英语:com.pozitron.qib)
com.quoine.quoinex.light(英语:com.quoine.quoinex.light)
com.rak
com.rbinternational.retail.mobileapp
com.rbl.rblmycard(英文)
com.regions.mob银行业务
com.revolut.revolut
RHB集团.RHB移动银行
com.riyadbank.战略
com.robinhood.android
com.rsi.科洛尼亚
com.rsi.ruralviawallet2
com.s4分钟
com.sa.gazt.Zakat计算器
com.sabb.mobilebanking
com.saib.banking.mobile.android
com.samba.mb网站
com.samourai.wallet
com.桑坦德.bpi
com.saraswat.mobilebankingv2
com.sbi.SBAnywhere公司
com.sbi.lotusintouch(com.sbi.lotusintouch)
com.scb.ae.宝马
com.scb.电话
com.丰业银行
丰业银行mx.scotiamovil
com.sella.BancaSella
com.shaketh(沙克斯酒店)
com.sib.retail(零售)
com.snapchat.android的
com.squareup.cash(平方现金)
com.tabtrader.android的
com.targoes_prod.bad
com.tarjetanaranja.emisor.serviciosClientes.appTitulares
com.tdbank(英语:com.tdbank)
com.tencent.mm
com.tideplatform.banking
com.todo1.davivienda.mobileapp
com.todo1.移动
com.transferwise.android
com.tronlinkpro.wallet
com.truist.mobile(新闻网)
com.turkcell.paycell(土耳其细胞支付细胞)
com.twitter.安卓
com.twitter.android.lite
com.uab.个人
com.uba.vericash(英语:com.uba.vericash)
com.ubanquity.redd.uba
com.ubercab.eats(优步cab.eats)
com.ubercab
com.ubldigital.uae
com.ubs.swidKXJ.android
com.uob.mighty.app
com.urpay.消费者
com.uy.itau.appitauuypf
com.v2msoft.contasimple
com.vancity.mobileapp
com.vanso.gtbankapp(英语:com.vanso.gtbankapp)
com.veripark(英语:com.veripark)
com.verizon.familybase.parent
com.verizon.insideverizon
com.verizon.messaging.vzmsgs
com.verizon.onetalk
com.verizon.sideview(英文)
com.viber.voip的
com.vipera.chebanca
com.vipera.nbf(英语:vipera.nbf)
com.vipera.ts.starter.MashreqAE
com.vipera.ts.starter.MashreqQA
com.virginmoney.cards(维珍钱卡)
com.vtb.移动银行
com.wallet.crypto.trustapp
com.warbabank.wallet
com.wavesplatform.wallet
com.whatsapp
com.whatsapp.w4b的
com.willmobile.mobilebank.fcb
com.woodforest(森林通讯)
com.wrx.wazirx
com.yahoo.mobile.client.android.mail(安卓邮件)
com.yap.银行业
com.zainkw.zain
com.zellepay.zelle(泽勒支付.zelle)
com.zenithBank.eazymoney(英语:com.zenithBank.eazymoney)
com.zoluxiones.officebanking(办公银行)
com.zzkko(zzkko)
coop.bancocredicoop.bancamobile
de.adesso_mobile.secureapp.netbank
de.comdirect.app
de.hafas.android.dimp
de.mobile.android.app
de.number26.android
de.桑坦德.presentation
de.sdvrz.ihb.mobile.app
de.sdvrz.ihb.mobile.secureapp.sparda.produktion
de.traktorpool
dk.nordea.移动银行
doge.org.freewallet.app
ee.mtakso.客户端
enbd.手机银行
企业.com.anz.shield
es.bancosantander.wallet
es.caixagalicia.activamovil
es.caixaontinyent.caixaontinyentapp
es.cecabank.ealia2103应用商店
es.orangebank.app
es.桑坦德.Criptocalculadora
es.桑坦德德.money
es.unicajabanco.app
eu.afse.omnia.attica
eu.atlantico.bancoat兰蒂科普
eu.eleader.mobilebanking.abk的
eu.eleader.mobilebanking.kib
eu.eleader.mobilebanking.nbk
eu.netinfo.colpatria.system(英语:eu.netinfo.colpatria.system)
出埃及记运动.出埃及记
fr.bnpp.digitalbanking
fr.bred.fr
fr.hsbc.hsbc法国
fr.lcl.android.entreprise
fr.oney.mobile.mescomptes
ge.bog.移动银行
ge.lb.移动银行
ge.mobility.basisbank(ge.mobility.basisbank)
ge.mobility.emoney(英语:ge.mobility.emoney)
global.bithumb.android
gr.winbank.mobile.cyprus
gr.winbank.mobile下一个
HR.asseco.Android.Intesa.isbd.cib
hr.asseco.android.jimba.mUCI.hu
hr.asseco.android.mtoken.bos
hu.bb.mobilapp
hu.cardinal.cib.mobilapp
hu.cardinal.erste.mobilapp
hu.khb的
hu.mkb.mobilapp
hu.otpbank.手机
网址:id.aladinbank.mobile
网址:d.bmri.livin
id.co.比特币
同上.co.bri.brimo
id.co.myhomecredit(我的家信用)
同上.dana
il.co.yahav.mob银行
il.co.yellow.app
io.cex.app.prod
io.ethos.通用钱包
io.metamask(英文)
io.safepal.钱包
it.bcc.iccrea.mycartabcc
it.caitalia.apphub(英语:it.caitalia.apphub)
它.carige
它.creval.bancaperta
it.hype.app
it.icbpi.移动
it.phoenixspa.inbank(英语:it.phoenixspa.inbank)
it.relax银行
jp.auone.钱包
jp.co.jcb.my
jp.co.nttdata
jp.coincheck.android的
jp.japanpost.post.postbox.android
jp.ne.paypay.android.app
ktbcs.netbank(ktbcs.netbank)
Lt.SpectroFinance.Spectrocoin.Android.钱包
ma.gbp.pocketbank
我.cryptopay.android
移动性.ge.terabank银行
mx.bancosantander.supermovil
mx.bancsabadell.part
mx.com.bb.b2
mx.hsbc.hsbc墨西哥
my.com.hongleongconnect.mobileconnect
my.com.hsbc.hsbc马来西亚
my.com.maybank2u.m2umobile
网络.aramex
net.bitbay.bitcoin(比特币.bitbay.bitcoin)
net.garagecoders.e_llavescotiainfo
net.one97.支付TM
org.banking.bom.businessconnect(英文)
org.banking.bsa.businessconnect(英文)
org.banking.stg.businessconnect(org.banking.stg.businessconnect)
org.microemu.android.model.common.VTUserApplicationBNBJMB
org.microemu.android.model.common.VTUserApplicationBNRTMB
org.microemu.android.model.common.VTUserApplicationLINKMB
org.telegram.messenger (英语)
org.toshi(组织.toshi)
org.westpac.col (英语)
ovo.id
pe.com.interbank.mobilebanking
pe.com.scotiabank.blpm.android.client
pe.pichincha.bm
飞马.project.ebh.mobile.android.bundle.mobilebank
pl.bsszczytno.ebomobilepro
pl.envelobank.aplikacja
Pl.fakturownia
pl.ifirma.ifirmafaktury
pl.nestbank.nestbank(内斯特银行)
Noblebank.移动端
pl.novum.mobile2
pl.raiffeisen.nfc
posteitaliane.posteapp.appbpol
pt.bancobest.android.mobilebanking
pt.bancobpi.mobile.fiabilização
pt.bctt.appbctt
pt.bigonline.BiGbile
pt.cgd.caderneta
pt.cgd.caixadirectaempresas
pt.eurobic.apps.mobilebanking
pt.novobanco.nbapp的
pt.novobanco.nbsmarter
pt.oney.oneyapp
pt.santander.oneappparticulares
pt.santandertotta.mobileempresas
pt.santandertotta.mobileparticulares
pt.sibs.android.mbway的
qa.hsbc.hsbcqatar
qa.ooredoo.omm
sa.alrajhibank.tahweelapp
sa.com.stcpay
sk.vub.移动
softax.pekao.powerpay
src.com.bni
tcig.mynajm(英语:tcig.mynajm)
TSB.手机银行
uk.co.hsbc.hsbcukmobilebanking
uk.co.mbna.cardservices.android
uk.co.metrobankonline.mobile.android.production
uk.co.tescomobile.android
uk.co.tsb.newmobilebank(英国公司TSB.newmobilebank)
us.zoom.videomeetings
uy.brou
uy.com.brou.token
wit.android.bcpBankingApp.activoBank
wit.android.bcpBankingApp.millennium
Signatures
-
Octo
Octo is a banking malware with remote access capabilities first seen in April 2022.
-
Octo family
-
Makes use of the framework's Accessibility service 4 TTPs 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.nameown12 Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId com.nameown12 -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.nameown12 -
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.nameown12 -
Performs UI accessibility actions on behalf of the user 1 TTPs 4 IoCs
Application may abuse the accessibility service to prevent their removal.
ioc Process android.accessibilityservice.IAccessibilityServiceConnection.performGlobalAction com.nameown12 android.accessibilityservice.IAccessibilityServiceConnection.performGlobalAction com.nameown12 android.accessibilityservice.IAccessibilityServiceConnection.performGlobalAction com.nameown12 android.accessibilityservice.IAccessibilityServiceConnection.performGlobalAction com.nameown12 -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.nameown12 -
Reads information about phone network operator. 1 TTPs
-
Requests accessing notifications (often used to intercept notifications before users become aware). 1 TTPs 1 IoCs
description ioc Process Intent action android.settings.ACTION_NOTIFICATION_LISTENER_SETTINGS com.nameown12 -
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
description ioc Process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS com.nameown12 -
Requests modifying system settings. 1 IoCs
description ioc Process Intent action android.settings.action.MANAGE_WRITE_SETTINGS com.nameown12 -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.nameown12
Processes
-
com.nameown121⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Performs UI accessibility actions on behalf of the user
- Queries the mobile country code (MCC)
- Requests accessing notifications (often used to intercept notifications before users become aware).
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Requests modifying system settings.
- Uses Crypto APIs (Might try to encrypt user data)
PID:4481
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Foreground Persistence
1Hide Artifacts
1User Evasion
1Impair Defenses
1Prevent Application Removal
1Input Injection
1Credential Access
Access Notifications
1Input Capture
2GUI Input Capture
1Keylogging
1Discovery
Software Discovery
1Security Software Discovery
1System Network Configuration Discovery
3Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
48B
MD5046a414913add6f5bb60072c7db819b6
SHA1451ee4f6809260aec622d772fd329c7d0297a842
SHA256b66c1320cb063a1d391c94273572ea6edae76c8c8b0a07f8d75c88686f0df72a
SHA5124e6355f3051ed5e811ab030abde1f5be7f5e1cf33be99cd08477e9b6c015deb1d8bd75a09fb9c7176b8511c5ad0a67abc0902a3531e97564ccb6afc57496a47c
-
Filesize
45B
MD5372465cf1db6c0c1a753d646341822cc
SHA1c26b5125567a135687ee297f4b921c6948be0a68
SHA256b58cfec47a61f25de2c1c5eade558bbcfe305313e563bfe8a41df147d2b8f621
SHA512ee9d37ff2b880186985bb040306912e410daf49eb011e08fc587d7dff0adb1f4c508b12d87343ed53898053906cd1e334b40fbe8639378850f4fb9bb3784c527
-
Filesize
66B
MD5b7813aac5f27e3985f7ad2f71a195c8e
SHA1e5a26dec7670138f9ab66f8c64169b0f5df8e95a
SHA2561362a7a5fad968e2b4476ebcb9d77ba415c516f9f3006472b6fb452346a7f0c3
SHA51293051199836552397a87472705b4b541565f328ea25508cc647b7688db177061f5f2c184389e5d4554378006661ee906a336e03237d6d0be5e2f3d2f9b445e1f
-
Filesize
84B
MD564fe5443af4d666bb8708eb4ec5f1b94
SHA114ab3941e89c0f8750ff80a09a7972ac10a56f43
SHA25692c1dc63789b82d5ddfffa9dc469e1a2c5700fcdd4d90461555124e226907be7
SHA51260721e6ad9f6ba249ff2a892ce1a0df86cea15206e5e8681b3bf94a23de3bd06d234b03f1229ec9e8a23baf2372803e4c67b93f562ef70d99402e6ec571adb3b
-
Filesize
63B
MD5548b3ca7fd5055cb102c957c3c303b50
SHA170ef5e4871a77df48059b5a672a6287ea1d07224
SHA2562203cd282ec0ffd2f68ea96d34c63d860c1d6c92d3a0a1d0dc65b72414c7d257
SHA5126bdfb1e7fcd1c62af18dadf0cd3c305fa32d8467116e6649861fbf691bcd1cc0eb02b0faffddadfa76971ffd952c0de27a770dd35d3e3228927066d79d1b45b5
-
Filesize
58B
MD503e455e7026c238a3a78c05afdd912bc
SHA11e951100c84b89f69b9d33ce5b92db6f223585bd
SHA256b41ce80f015e578409c2161daf818d84389e992675afe28e5c2326322911903a
SHA5121511a17cb5fc44692bfc845052a3a5a681f9f29e284e3b87beb942503f481020d3ee835e5b90205d2d72f261f4f049f9d6645929c5528a9e57f2208c00236a87
-
Filesize
63B
MD5e7d0e028cf63ca34a2baea4307360252
SHA1eb883a0dbe5b25e3e9d02603d4197ef4c1909f40
SHA25668791b505118d18cb64e539d9fd0c0e5c0677ff37497ab7686e0b993cf1669ba
SHA512e3f2f3f65da623bc7c36f923e61d0630018f229aac066697bfda685a7cef25ca1063e860b3ec0f0365fd775c814307d4f2916fea262e80e109df3784877bcb29
-
Filesize
238B
MD57eeadce7f53384b54b993aa9a34a6aee
SHA16e369bb125988ce6d611ac4f2360ec10d8819fae
SHA2563c3453fa321d27f58b8dea15cc306015264269038c3dc6dc0bb4b77d7a23ef5a
SHA5126499caab317f9762694a7ee3cc732bbc1f7f01e8ee0eec7ec5b6d67190027d39c460d16f146cf596ccc03ddbfa2afaa0cc370b98e75690e787b38b655277b990
-
Filesize
45B
MD5514587d871fe6c91c9544a422809d845
SHA14a0f98776a72b92e12ff0c2df7d65944d6cfff4e
SHA256fadc2db63af7c9d9c229be16069b7ad4f5e046f33cf3d47d194840e6d329583b
SHA512f4c45626791b459e614822752ffbe3fbf9fbc377ebda4aee59b65b840f640b5afe0cb4d968ba00c97277576a7f5a71be1d245987fce8ec0831d7f5b5cf6db379
-
Filesize
63B
MD57699a32ccb55365eebc7b9d190e15782
SHA1bd2df2bc4d8edff9beec54a160f4e2a254c14661
SHA256adcdcf178eb302fc7ff1d53a7a2ba9faba93cdd97e5b6f85c6dee2a1d18afeb1
SHA5129d4747b36f3794cb3516cf41c0a93829f4354c59f16ff085788d7f30f39dcfe4792054e36b14b81ce66b498a0fea06f5a505b86649deea4579f2909de16a0d6f
-
Filesize
45B
MD5b2f7580739f84e04b3c8d07c2ceef6bb
SHA1ea29b1116c21ce2ef3cbf0b68e030033a2fa8e61
SHA256aae464456ae8e738840d256be449e60ce471db2368dd1106c9bfc03b5813c5b5
SHA51204f36b9013fa740336bbcd1ab59bb3f4055f1538a4bf45be25f501fff5cef6de6f1e7f169b574c214c57e7f0f2f733d8f78a04d962316be38b02c062752461d5
-
Filesize
482B
MD5779e4f5b95fadce30197587f7de481b5
SHA1da4d1f68c5a5f7a017b4142558ba8d3713493df1
SHA256a960b896ed5b479168e576249d3030b53d6a54f2dbb92aa5d9deea2c207e2141
SHA5120f743d28ae2a2c28c7af57aae09f5c0122aa84527500c5319a45c8f6cb71e865ab42c45876839ba9fd1c28eff3462c89c84195300ce3d9f15f6a6d18e717cc60
-
Filesize
63B
MD56065d4fe9cf880dfe618f2bfdc309531
SHA189cac99e320c89a2f66556e915d4ec850caa9eb6
SHA25688ab289bd5fe38c99f70c6dfec01beb5382f31130470214ac811c55a36939eae
SHA51294608dfd17c8d9549e0ad4ba7706a240ce6dcc0c0f59855c61a52f6b9df2d91f9532b867da65f96e842cbca120a758ba57871ea71d1b41457851fde6e6eea688
-
Filesize
58B
MD53419b54885caab935151af829f720335
SHA19634306dbfe94e527119fcbf9f601c182d5d2244
SHA256cb668dbb9a7d67cb713308162a8648a6ff77181f5de952a25d470e7ee32047ef
SHA51207cf10a1487594ada8a99d7663fba2f41ce241135094a29605713587403035b9f82a55c4ccf6270422c50de327e328f446d676d05886e58263562ef1a2e73846