General
- Target 0e88d98843377bab91dd2e081786f9152615b9d45ef32debcbfc99f2c94ef04c.zip
- Size 3.9MB
- Sample250325-hbc2kasthy
- SHA256 0e88d98843377bab91dd2e081786f9152615b9d45ef32debcbfc99f2c94ef04c
Score
10/10
Malware Config
Targets
-
- Target b74b65f68641feb46d22fddb595fff57cba53f5e3d4d780f4b1bf9b2682a9230.apk
- Size 4.1MB
- SHA256 b74b65f68641feb46d22fddb595fff57cba53f5e3d4d780f4b1bf9b2682a9230
Score10/10-
TeaBot
TeaBot is an android banker first seen in January 2021.
-
TeaBot payload
-
Teabot family
-
Removes its main activity from the application launcher
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
-
Queries the mobile country code (MCC)
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Hide Artifacts
2Suppress Application Icon
1User Evasion
1Impair Defenses
1Prevent Application Removal
1Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Credential Access
Clipboard Data
1Input Capture
2GUI Input Capture
1Keylogging
1