Overview

overview

10

Static

static

10

18AgetWsAp...Ux.apk

android-9-x86

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    18AgetWsAppV4-f3z8Ux.apk
  • Size 85.7MB
  • Sample250817-e4mvpasycw
  • SHA256 9456fca3505e2cf13d07b3b752f6cec4ce386ac2a91bb2d027b6cff35f630d24
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
antidottriadaandroidbankerdiscoveryevasionexecutionimpactinfostealerpersistencetrojanupx

Malware Config

Targets

    • Target
      18AgetWsAppV4-f3z8Ux.apk
    • Size 85.7MB
    • SHA256 9456fca3505e2cf13d07b3b752f6cec4ce386ac2a91bb2d027b6cff35f630d24
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    antidotbankerdiscoveryevasionexecutionimpactinfostealerpersistencetrojanupx

    • Antidot

      Antidot is an Android banking trojan first seen in May 2024.

      bankertrojaninfostealerantidot

    • Antidot family

      antidot

    • Antidot payload

    • Patched UPX-packed file

      Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Acquires the wake lock

    • Queries information about active data network

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Mobile v16

Tasks