General
- Target 38988e4b09d30257235f62d77d1c7da4e884214dadd9aedf64abc3b3911106e6.bin
- Size 2.2MB
- Sample250522-12e8qaej8v
- SHA256 38988e4b09d30257235f62d77d1c7da4e884214dadd9aedf64abc3b3911106e6
- MD5 50f9f828bb0dd820189a0e915e137aad
- SHA1 48f4f2527fd154574ae9a23226906762a979c9f3
- SHA512 035ab783272f63848dbf4a14fd9fc6ea256b2b754296f42f241c6fae3c92675713315c4a2ad64f4edceccb341af73fd98408a3414ccc16840a95825113d846cc
- SSDEEP 49152:Ygmpxdx9ca4PBsVEaqKYwleubwy68BA8Tox4DBsvSKgIS09R:aHxRCsi3Kf7TBz0CDESm9R
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
38988e4b09d30257235f62d77d1c7da4e884214dadd9aedf64abc3b3911106e6.apk
Resource
android-x86-arm-20240910-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
38988e4b09d30257235f62d77d1c7da4e884214dadd9aedf64abc3b3911106e6.apk
Resource
android-x64-20240910-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
38988e4b09d30257235f62d77d1c7da4e884214dadd9aedf64abc3b3911106e6.apk
Resource
android-x64-arm64-20240910-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
crocodilus
C2
-
http://registersalesnew-buzzy.store
Extracted
Family
-
crocodilus
AES_key
Targets
-
- Target 38988e4b09d30257235f62d77d1c7da4e884214dadd9aedf64abc3b3911106e6.bin
- Size 2.2MB
- SHA256 38988e4b09d30257235f62d77d1c7da4e884214dadd9aedf64abc3b3911106e6
- MD5 50f9f828bb0dd820189a0e915e137aad
- SHA1 48f4f2527fd154574ae9a23226906762a979c9f3
- SHA512 035ab783272f63848dbf4a14fd9fc6ea256b2b754296f42f241c6fae3c92675713315c4a2ad64f4edceccb341af73fd98408a3414ccc16840a95825113d846cc
- SSDEEP 49152:Ygmpxdx9ca4PBsVEaqKYwleubwy68BA8Tox4DBsvSKgIS09R:aHxRCsi3Kf7TBz0CDESm9R
- MD5 SHA1 SHA512 SSDEEP
-
Crocodilus
Crocodilus is a banking malware with extensive remote control capabilities first seen in March 2025.
-
Crocodilus family
-
Crocodilus payload