tanglebot | 6e0a8ba6bff84f0c3e544f2374da72d53c5c52057100b0b120c39743ca5d22d8

General

Target

a614bc357cc781f979fda829aebf8480.apk
Size

16.3MB
Sample

250330-m7fvjszky6
MD5

a614bc357cc781f979fda829aebf8480
SHA1

a9669c3dcba8c7efd0791a00419c1615d71df96b
SHA256

6e0a8ba6bff84f0c3e544f2374da72d53c5c52057100b0b120c39743ca5d22d8
SHA512

9edea978f51827209b110b34ee23809592a017e982913ca10ec65258bdd169b447a3cabc01d024fed57a46fbae75d51c132be06e8dbe1ce63d2c097b7490130a
SSDEEP

393216:7/D3sVMnSiBAVbN7c7y9pmMqwnykPAjNnfVx/aArOT0:7/wKnHEbx8y79qwnJ4ddx/a+a0

Score

10^/10

Malware Config

Targets

- Target
  
  a614bc357cc781f979fda829aebf8480.apk
- Size
  
  16.3MB
- MD5
  
  a614bc357cc781f979fda829aebf8480
- SHA1
  
  a9669c3dcba8c7efd0791a00419c1615d71df96b
- SHA256
  
  6e0a8ba6bff84f0c3e544f2374da72d53c5c52057100b0b120c39743ca5d22d8
- SHA512
  
  9edea978f51827209b110b34ee23809592a017e982913ca10ec65258bdd169b447a3cabc01d024fed57a46fbae75d51c132be06e8dbe1ce63d2c097b7490130a
- SSDEEP
  
  393216:7/D3sVMnSiBAVbN7c7y9pmMqwnykPAjNnfVx/aArOT0:7/wKnHEbx8y79qwnJ4ddx/a+a0
Score

1^/10
behavioral1 behavioral2
- Target
  
  base.apk
- Size
  
  15.1MB
- MD5
  
  b1c7c797891873f82992d328a32d0953
- SHA1
  
  396171fe6da60d4e9fd6944a90f51992eb97067d
- SHA256
  
  0dbf16e9260a8ff029075503c719734f61b47b21b54e230b9f41fb6b0bc234bf
- SHA512
  
  95f553393ba02bbe4d6c304113aa807e14535ea893d12b92511c4636cb48e01bfd9498af3eff980319fd3826e63ed62eafa04eb6b1c5e4283ab2f386b57d83d6
- SSDEEP
  
  393216:jxZ+M1HtgNrQBMIvabjC38MJAjrz75kWx:OyHtmUM6gjC3bW775kW
Score

7^/10

banker defense_evasion discovery impact persistence
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  defense_evasion persistence
- Queries information about active data network
  discovery
behavioral3 behavioral4