tanglebot | 4b0c4419cb96f3d30be4b66952507c69610cb7d2b05f564bdcf32affb6115262

Analysis

max time kernel
6s
max time network
151s
platform
android-10_x64
resource
android-x64-20240910-en
resource tags

arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system
submitted
21/03/2025, 17:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4b0c4419cb96f3d30be4b66952507c69610cb7d2b05f564bdcf32affb6115262.apk
Size

8.9MB
MD5

f1c5f85dd0211241dc04b47c394a6b97
SHA1

4c67ea218230a004a2e84b158facc975dbf2ccb2
SHA256

4b0c4419cb96f3d30be4b66952507c69610cb7d2b05f564bdcf32affb6115262
SHA512

5b967977a02a6a7f5c52e866f1270f29186d150847e0a194444267f494fde7ff0ad6dccdb73ec481f5a84dfd2fb3e46f3462d16515e4e488c88a0cbdd7a7f463
SSDEEP

196608:fGRxCKykKLorTi/zThx2/pUyIUGTRDXbiobLitDq7ox:vnorTi/5xbcG1biobLik7Q

Score

10^/10

tanglebot evasion infostealer spyware trojan

Malware Config

Signatures

TangleBot
TangleBot is an Android SMS malware first seen in September 2021.
trojan infostealer spyware tanglebot

TangleBot payload 1 IoCs

resource	yara_rule
behavioral2/memory/5072-0.dex	family_tanglebot3

Tanglebot family
tanglebot

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.minor.scrap/app_chef/wLxgaC.json	5072	com.minor.scrap

com.minor.scrap
1⤵
- Loads dropped Dex/Jar
PID:5072

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.minor.scrap/app_chef/wLxgaC.json

Filesize
1.8MB

MD5
699acf3fceef4e7d3a7a39c0cafca09e

SHA1
7255e51bd743c9010b6f4035d1ba6b6def15c3f9

SHA256
442a8fc7340c9bc1e07f9881c422e6c4558a361d003be57ed472d6cb96ca76e3

SHA512
0bf80b266c901fc73bd6d82ded609e36b953306966eb643432512ebe148804a094e2fa5b86b11664cda7959bb3a432583533e03542682fb69aa8867b0f25c22d

Download Submit
/data/data/com.minor.scrap/app_chef/wLxgaC.json

Filesize
1.8MB

MD5
5c1980c07d7e95b410a696871ccd1c65

SHA1
5de343393b0b73f08e07ad24e430484b92151eef

SHA256
4425deafd75f01cd75b6b9c62cd858e5f221a85db46032c32e25a28df37288ca

SHA512
a2e3a7a9d0e74a51ca08f469324e117b16348de08241a6eb261559f8879289109e40037601b57b08b24b331fb5ed3defd78b901fbb2fe940ec4546b0f5a2cfb7

Download Submit
/data/user/0/com.minor.scrap/app_chef/wLxgaC.json

Filesize
4.4MB

MD5
f5810de42ed439a5847adbe19a754f6c

SHA1
5151e8dbb86869ad8308529598798517dd9c422f

SHA256
ac53e017efbd26a29bb8091b24618430747ec84f6325bda32bf63cf1d2bd587f

SHA512
b930fb254fa691034b211c50339935831075f3236f5cf6c9271c5948efcc8931295703c1358de37472aaf924baed803b524c3a255949ae26f621541f6582901b

Download Submit