General

  • Target
    38988e4b09d30257235f62d77d1c7da4e884214dadd9aedf64abc3b3911106e6.bin
  • Size 2.2MB
  • Sample250522-12e8qaej8v
  • SHA256 38988e4b09d30257235f62d77d1c7da4e884214dadd9aedf64abc3b3911106e6
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • crocodilus

C2
  • http://registersalesnew-buzzy.store

Extracted

Family
  • crocodilus

AES_key

Targets

    • Target
      38988e4b09d30257235f62d77d1c7da4e884214dadd9aedf64abc3b3911106e6.bin
    • Size 2.2MB
    • SHA256 38988e4b09d30257235f62d77d1c7da4e884214dadd9aedf64abc3b3911106e6
    • MD5 SHA1 SHA512 SSDEEP
    • Crocodilus

      Crocodilus is a banking malware with extensive remote control capabilities first seen in March 2025.

    • Crocodilus family

    • Crocodilus payload

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Mobile v16

Tasks