tanglebot | 0deb21fdba5fc32e6186bc6593f904490fdf65dbacb014077f1286f050a3b946 | Triage

Sharing

General

Target

0deb21fdba5fc32e6186bc6593f904490fdf65dbacb014077f1286f050a3b946
Size

8.7MB
Sample

241216-dgd4la1jdw
MD5

34f2f1ca57fec362ec5ecff9632882d9
SHA1

084bc677dde1f2e4ca5b68cfbc3e000573d0a9d2
SHA256

0deb21fdba5fc32e6186bc6593f904490fdf65dbacb014077f1286f050a3b946
SHA512

bcb022f51b152688986a70aee5c56127ff6233d254cb33eb9034226088ea61f2283691b66b1fdec81aaaf0b16c71e9151ffa840983f68bd9459ff2b81e2e927a
SSDEEP

196608:okxcQ/tVmsqcwknnjWuIvPG2frzz/v5mloU0dpe4Ot:jxfjVqYnjuGKr3/sVuat

Score

10^/10

tanglebot android evasion infostealer spyware trojan

Malware Config

Targets

- Target
  
  0deb21fdba5fc32e6186bc6593f904490fdf65dbacb014077f1286f050a3b946
- Size
  
  8.7MB
- MD5
  
  34f2f1ca57fec362ec5ecff9632882d9
- SHA1
  
  084bc677dde1f2e4ca5b68cfbc3e000573d0a9d2
- SHA256
  
  0deb21fdba5fc32e6186bc6593f904490fdf65dbacb014077f1286f050a3b946
- SHA512
  
  bcb022f51b152688986a70aee5c56127ff6233d254cb33eb9034226088ea61f2283691b66b1fdec81aaaf0b16c71e9151ffa840983f68bd9459ff2b81e2e927a
- SSDEEP
  
  196608:okxcQ/tVmsqcwknnjWuIvPG2frzz/v5mloU0dpe4Ot:jxfjVqYnjuGKr3/sVuat
Score

10^/10

tanglebot evasion infostealer spyware trojan
- TangleBot
  TangleBot is an Android SMS malware first seen in September 2021.
  trojan infostealer spyware tanglebot
- TangleBot payload
- Tanglebot family
  tanglebot
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
behavioral1
- Target
  
  base.apk
- Size
  
  7.3MB
- MD5
  
  a091f3698e2e0e4258ec09b7499f82a2
- SHA1
  
  7b33bfa417bbd5c5848012f5ff15408df10fbd3b
- SHA256
  
  b34e33e934d4d37d9b062849b5234ca88b379f22a76f7102f14541edab8b9a0a
- SHA512
  
  95b0ba367f6675d9759ad71d3b3924a83b132132681e37dfaabc529b59199b0a932a5fc96c08e817719d04213c88d779fa49dc760581babf25875958b05fd755
- SSDEEP
  
  98304:1F7efW5iSRGkXRsaCithKj7uVKqW27fISJOX:1F7brlR2ckj7uUlYISJs
Score

1^/10
behavioral2

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tanglebotevasioninfostealerspywaretrojan

behavioral2