tanglebot | a358808d6301fb94ee473db9a565bdb3f4c7b11b3d0df1527133e201ba6980da

General

Target

Bank Of Maharashtra Credit Card Verification .apk
Size

10.9MB
Sample

250331-shbr7avmt8
MD5

2f1f4232ae52bab018fa1709ccda9996
SHA1

ee23c0175f20e9920d71f8dd9ae322e9e477dec5
SHA256

a358808d6301fb94ee473db9a565bdb3f4c7b11b3d0df1527133e201ba6980da
SHA512

5686d836437e6842db5721c24c7c725c693607d8dc70516303b07d1d4853878d61724a900f3c07a7540608d3f86dd6c50c026847e87fc00bef5cc21267a22d79
SSDEEP

196608:iUqEk+wmCzDIT+7oGqFuP029oKL4HNZAhDyz2As5T018xwTRklptyIve+oZyNxv:iUOzDAgg2x4zApyW1018x9ftyIv+0h

Score

10^/10

Malware Config

Targets

- Target
  
  Bank Of Maharashtra Credit Card Verification .apk
- Size
  
  10.9MB
- MD5
  
  2f1f4232ae52bab018fa1709ccda9996
- SHA1
  
  ee23c0175f20e9920d71f8dd9ae322e9e477dec5
- SHA256
  
  a358808d6301fb94ee473db9a565bdb3f4c7b11b3d0df1527133e201ba6980da
- SHA512
  
  5686d836437e6842db5721c24c7c725c693607d8dc70516303b07d1d4853878d61724a900f3c07a7540608d3f86dd6c50c026847e87fc00bef5cc21267a22d79
- SSDEEP
  
  196608:iUqEk+wmCzDIT+7oGqFuP029oKL4HNZAhDyz2As5T018xwTRklptyIve+oZyNxv:iUOzDAgg2x4zApyW1018x9ftyIv+0h
Score

1^/10
behavioral1 behavioral2 behavioral3
- Target
  
  base.apk
- Size
  
  9.7MB
- MD5
  
  1897e95e7c55f3a3677228ad14420940
- SHA1
  
  f6032a14df0b3aedbd68807a344219b13955b775
- SHA256
  
  f2ed4cb875591cbaf9d0bd41c0b5c0c3ab958939dca07d4f9ec709b0f5d040dd
- SHA512
  
  e64a0736210bc2fb5224f5c34fc51b074038d6b3dda8377bf8229d58f12dbb95aa2c7b832fc0da68a94ec0620e1b70eaec93f0301c4a09319211411abb2ee250
- SSDEEP
  
  196608:5aXKxoChLzu1HQSBqLqUyb+G+TEbxYuyof0fCYuBGIQcdlcn:ieowYHr/bWEdYXe0uBGIQ6cn
Score

7^/10

banker defense_evasion discovery impact persistence
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  defense_evasion persistence
- Queries information about active data network
  discovery
behavioral4 behavioral5