General
- Target 1fe38d4ee21bc0fecbba6f9aad7559d4c42d9385852d0df872cb814ab6bfcbb2.bin
- Size 3.5MB
- Sample250321-2blhgswkw6
- SHA256 1fe38d4ee21bc0fecbba6f9aad7559d4c42d9385852d0df872cb814ab6bfcbb2
- MD5 cb072ad519e8386f2f8acf82a6f57ed0
- SHA1 08aa5ef185c1add8871bbaa163184de2e88c7c7a
- SHA512 587a3f5167001d4f1af6b65f8eb3421e68c56443b7bf61e4c0ff65efb0626b4b76a95a4c73b4440c4985c6f63168d4133b5b8a565e1434743c894278dd19dd62
- SSDEEP 98304:/tU+qyfprZ12LzRyDu7t9SWUiMpH4B+TpQ24Mj:/tU+bZ12Yi7Wre+tN
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
1fe38d4ee21bc0fecbba6f9aad7559d4c42d9385852d0df872cb814ab6bfcbb2.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
1fe38d4ee21bc0fecbba6f9aad7559d4c42d9385852d0df872cb814ab6bfcbb2.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
1fe38d4ee21bc0fecbba6f9aad7559d4c42d9385852d0df872cb814ab6bfcbb2.apk
Resource
android-x64-arm64-20240910-en
Malware Config
Extracted
-
sharkbot
-
http://mefika.me/
-
target_apps
com.example.creatersa
com.barclays.android.barclaysmobilebanking
com.bankofireland.mobilebanking
com.cooperativebank.bank
ftb.ibank.android
com.nearform.ptsb
uk.co.mbna.cardservices.android
com.danskebank.mobilebank3.uk
com.barclays.bca
com.tescobank.mobile
com.virginmoney.uk.mobile.android
com.monitise.client.android.yorkshire
com.monitise.client.android.clydesdale
com.cooperativebank.smile
com.starlingbank.android
uk.co.metrobankonline.mobile.android.production
uk.co.santander.santanderUK
uk.co.hsbc.hsbcukmobilebanking
uk.co.tsb.newmobilebank
com.grppl.android.shell.BOS
com.grppl.android.shell.halifax
com.grppl.android.shell.CMBlloydsTSB73
it.copergmps.rt.pf.android.sp.bmps
it.extrabanca.mobile
it.relaxbanking
it.bnl.apps.banking
it.bnl.apps.enterprise.hellobank
it.ingdirect.app
it.popso.SCRIGNOapp
it.nogood.container
posteitaliane.posteapp.appbpol
com.latuabancaperandroid
com.latuabancaperandroid.pg
com.latuabancaperandroid.ispb
com.fineco.it
com.CredemMobile
com.bmo.mobile
com.fideuram.alfabetobanking
com.lynxspa.bancopopolare
com.vipera.chebanca
Targets
-
- Target 1fe38d4ee21bc0fecbba6f9aad7559d4c42d9385852d0df872cb814ab6bfcbb2.bin
- Size 3.5MB
- SHA256 1fe38d4ee21bc0fecbba6f9aad7559d4c42d9385852d0df872cb814ab6bfcbb2
- MD5 cb072ad519e8386f2f8acf82a6f57ed0
- SHA1 08aa5ef185c1add8871bbaa163184de2e88c7c7a
- SHA512 587a3f5167001d4f1af6b65f8eb3421e68c56443b7bf61e4c0ff65efb0626b4b76a95a4c73b4440c4985c6f63168d4133b5b8a565e1434743c894278dd19dd62
- SSDEEP 98304:/tU+qyfprZ12LzRyDu7t9SWUiMpH4B+TpQ24Mj:/tU+bZ12Yi7Wre+tN
- MD5 SHA1 SHA512 SSDEEP
Score6/10Queries information about active data network
Reads information about phone network operator.