Overview

overview

10

Static

static

10

Android NoDNS

android-13-x64

7

Android NoDNS

android-9-x86

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    2ad98b31d8c45954be954eeaf934696bdc83a94d3b031247c7b26ee4f5543917
  • Size 13.5MB
  • Sample250815-3vnbvsfp7v
  • SHA256 2ad98b31d8c45954be954eeaf934696bdc83a94d3b031247c7b26ee4f5543917
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
sharkbotandroidbankerdefense_evasiondiscoveryexecutionimpactpersistence

Malware Config

Extracted

Family

  • sharkbot

C2

  • http://statscodicefiscale.xyz/stats/

Targets

    • Target
      2ad98b31d8c45954be954eeaf934696bdc83a94d3b031247c7b26ee4f5543917
    • Size 13.5MB
    • SHA256 2ad98b31d8c45954be954eeaf934696bdc83a94d3b031247c7b26ee4f5543917
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    bankerdefense_evasiondiscoveryexecutionimpactpersistence

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Checks the application is allowed to request package installs through the package installer

      Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

      defense_evasion

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

      defense_evasionpersistence
    behavioral1behavioral2

MITRE ATT&CK Mobile v16

Tasks