5bb1465d5e038f6d282b3a09ed738cc89153c767d513e724ded36bad907f7d54

General

Target

Induslnd bank y03.apk
Size

4.6MB
Sample

250328-k8rx4awlz2
MD5

868dd4b7bf3f2b2b902569ae8836793b
SHA1

4d545ef618350746f291343de763a72a3e16bb00
SHA256

5bb1465d5e038f6d282b3a09ed738cc89153c767d513e724ded36bad907f7d54
SHA512

0d7b1c31d86c0f6d6deac1c64edde0d2101cd664788bd5ce8c92890678dc4a6bd68e571117bc0aae3f3a2f34bab40200d6067207e33116d5d73ca367b6e8b119
SSDEEP

98304:7a6v44bq1rln4MBgTINaKeeZrQ0grvHShZGmROK+qu:7a+zq1J4MqUPee1dQHShImL+qu

Score

7^/10

Malware Config

Targets

- Target
  
  Induslnd bank y03.apk
- Size
  
  4.6MB
- MD5
  
  868dd4b7bf3f2b2b902569ae8836793b
- SHA1
  
  4d545ef618350746f291343de763a72a3e16bb00
- SHA256
  
  5bb1465d5e038f6d282b3a09ed738cc89153c767d513e724ded36bad907f7d54
- SHA512
  
  0d7b1c31d86c0f6d6deac1c64edde0d2101cd664788bd5ce8c92890678dc4a6bd68e571117bc0aae3f3a2f34bab40200d6067207e33116d5d73ca367b6e8b119
- SSDEEP
  
  98304:7a6v44bq1rln4MBgTINaKeeZrQ0grvHShZGmROK+qu:7a+zq1J4MqUPee1dQHShImL+qu
Score

1^/10
behavioral1
- Target
  
  base.apk
- Size
  
  1.6MB
- MD5
  
  fc4313deba3573718de4b076b9fd1cc2
- SHA1
  
  6e82a74d26c7a093c38a8417b32fac5b688b8e92
- SHA256
  
  d4f08163f2c1a872e6a04af39b932c69bd57aae475f82757766940535273c171
- SHA512
  
  c1234b45e963972ea5e96a2259a74c3afdf76e88c887c4beec9bc8517c12ca84027257e2fc30a6652af279e421d703117d2805de308d16d1e318a3557f19bc4f
- SSDEEP
  
  49152:xwvJOZ4dO76TD9GJuU4um0xG/nt59sxEJI6:KvJOZ4sW1z7/n/9hJr
Score

7^/10

collection credential_access defense_evasion discovery impact persistence
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  defense_evasion persistence
- Queries information about active data network
  discovery
behavioral2