7dd6bd944f7b5d318488c7248eef0963d549541033eba73e70d6f58b2869d946
- SHA256 7dd6bd944f7b5d318488c7248eef0963d549541033eba73e70d6f58b2869d946
-
TangleBot payload
com.mem.installdropsession
Behavioral task
behavioral1
Sample
7dd6bd944f7b5d318488c7248eef0963d549541033eba73e70d6f58b2869d946.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
base.apk
Resource
android-x86-arm-20240624-en
| resource | yara_rule |
|---|---|
| sample | family_tanglebot3 |
| description | ioc |
|---|---|
| Required by device admin receivers to bind with the system. Allows apps to manage device administration features. | android.permission.BIND_DEVICE_ADMIN |
| description | ioc |
|---|---|
| Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device. | android.permission.BIND_NOTIFICATION_LISTENER_SERVICE |
| Required by accessibility services to bind with the system. Allows apps to access accessibility features. | android.permission.BIND_ACCESSIBILITY_SERVICE |
| description | ioc |
|---|---|
| Allows an application to request installing packages. | android.permission.REQUEST_INSTALL_PACKAGES |
TangleBot payload
TangleBot payload
android.permission.REQUEST_INSTALL_PACKAGES