General
- Target 91135fdeeab900ad00302f025096741e3fbfe3e5ba2aee57c7d513564ff24d86.bin
- Size 1.7MB
- Sample241119-rwbtnsxbpe
- SHA256 91135fdeeab900ad00302f025096741e3fbfe3e5ba2aee57c7d513564ff24d86
Score
10/10
Malware Config
Extracted
Family
-
ajina
C2
-
46.226.160.5:8080
Attributes
-
target_apps
air.com.ssdsoftwaresolutions.clickuz
am.easypay.easywallet
am.imwallet.android
am.mts.mobidram
am.upay.android
app.ab.banking
arca.am.arca
az.anipay.usermbanking
az.cib.app
az.epul.technopay.android
az.portmanat.app
az.portmanat.newapp
az.pulpal
az.tezpay.app
com.binance.dev
com.eg.android.AlipayGphone
com.fastshift.wallet
com.haypost.haypost_mobile
com.intervale.baitushum
com.ipc_app
com.kp.kompanion
com.kp.megapay.kg
com.m10
com.maanavan.mb_kyrgyzstan
com.mbf.fsclient_android
com.moneybookers.skrillpayments
com.ofss.digx.mobile.android.allied
com.olsoft.mats.prod
com.pyypl
com.safaroff.million_android
Targets
-
- Target 91135fdeeab900ad00302f025096741e3fbfe3e5ba2aee57c7d513564ff24d86.bin
- Size 1.7MB
- SHA256 91135fdeeab900ad00302f025096741e3fbfe3e5ba2aee57c7d513564ff24d86
Score7/10-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.