General
-
Target
Interbank-Seguridad.apk
-
Size
9.0MB
-
Sample
250401-tkm4nstrt3
-
MD5
fbf090a4afaccec57fb82c75277ce2aa
-
SHA1
8642fb93b62fa7bffbc90b0297a63830383f0b0e
-
SHA256
119cafc86fcec7d56685aa283cef488f45d5781c476bb12b3d1893307a4db5d6
-
SHA512
702056c628a30a2993061da1a6175ddd5ac048777eb31adc805419bd80212a755c0fc5a0583389f133a7ed41a16b3ee66513edd41364bb8b56561c7c24abd04c
-
SSDEEP
196608:V6Sq064P48EwpWf34nGixiDKqlVFCDzov36b41PZaDPtoZ1RkKdqsL0aJ:gSq064Rk34IDtCDUv3S41P0D+R7wMJ
Behavioral task
behavioral1
Sample
Interbank-Seguridad.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
Interbank-Seguridad.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
Interbank-Seguridad.apk
Resource
android-x64-arm64-20240910-en
Behavioral task
behavioral4
Sample
childapp.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral5
Sample
childapp.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral6
Sample
childapp.apk
Resource
android-x64-arm64-20240910-en
Malware Config
Targets
-
-
Target
Interbank-Seguridad.apk
-
Size
9.0MB
-
MD5
fbf090a4afaccec57fb82c75277ce2aa
-
SHA1
8642fb93b62fa7bffbc90b0297a63830383f0b0e
-
SHA256
119cafc86fcec7d56685aa283cef488f45d5781c476bb12b3d1893307a4db5d6
-
SHA512
702056c628a30a2993061da1a6175ddd5ac048777eb31adc805419bd80212a755c0fc5a0583389f133a7ed41a16b3ee66513edd41364bb8b56561c7c24abd04c
-
SSDEEP
196608:V6Sq064P48EwpWf34nGixiDKqlVFCDzov36b41PZaDPtoZ1RkKdqsL0aJ:gSq064Rk34IDtCDUv3S41P0D+R7wMJ
Score1/10 -
-
-
Target
childapp.apk
-
Size
4.8MB
-
MD5
402ba47c30c6179aaf66f4e8a313c205
-
SHA1
aa33fd165849144dc48427fa159798ce38f8896d
-
SHA256
14bad154fd25d4f02952125df1af5317332e5f2b963d1c9dba71b45a92068438
-
SHA512
2499042b7c01a4c7eec40eb837ce742f70f2d4155fa150a926c50a18f9d5610043042078c2a77987f4a80ed9e2be4daf2d761193c022fb09f587e31dadc1bd65
-
SSDEEP
98304:fk4+zB2TAmzbFX6BBTzxMoIUzbSfdv2bvCEx0tef87V7Tj1E:fjD/zpCMoznWvsvCEOefgV7TW
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-