General

  • Target

    e66fc71e6214d06c4f6a927a81dff67832400b96e13db009554fbb76c3a7e8c3

  • Size

    8.1MB

  • Sample

    250322-a7hmxsyjz8

  • MD5

    39ed4c523ff7821c169ce57c444ba726

  • SHA1

    bad2cba58358b58db890e56116077f28ec55a744

  • SHA256

    e66fc71e6214d06c4f6a927a81dff67832400b96e13db009554fbb76c3a7e8c3

  • SHA512

    6a6f6f2ae61a92fcc6b0e3099e4c489b719974d6b9f5b2bac3c99b920ef8fe04cc0a4701286b0310ef5c775d551c9e81ee90f5a1fc3f9e0d7910b372204e8d64

  • SSDEEP

    196608:kcMcwnozila1aKuENgN0ZdxQx/KnlqEarojri:bMDozia1bjvaW3arojm

Malware Config

Extracted

Family

trickmo

C2

http://ultramarketplace.eu/c

Targets

    • Target

      e66fc71e6214d06c4f6a927a81dff67832400b96e13db009554fbb76c3a7e8c3

    • Size

      8.1MB

    • MD5

      39ed4c523ff7821c169ce57c444ba726

    • SHA1

      bad2cba58358b58db890e56116077f28ec55a744

    • SHA256

      e66fc71e6214d06c4f6a927a81dff67832400b96e13db009554fbb76c3a7e8c3

    • SHA512

      6a6f6f2ae61a92fcc6b0e3099e4c489b719974d6b9f5b2bac3c99b920ef8fe04cc0a4701286b0310ef5c775d551c9e81ee90f5a1fc3f9e0d7910b372204e8d64

    • SSDEEP

      196608:kcMcwnozila1aKuENgN0ZdxQx/KnlqEarojri:bMDozia1bjvaW3arojm

    • TrickMo

      TrickMo is an Android banking trojan with the capability to intercept 2FA codes first seen in September 2019.

    • Trickmo family

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Mobile v15

Tasks