General
- Target 7bb7971b3a8ea2cca40382b876c31b7230c90c99a748184c76b0b19a2cdffb7f.bin
- Size 4.3MB
- Sample251017-r6j8sscs9a
- SHA256 7bb7971b3a8ea2cca40382b876c31b7230c90c99a748184c76b0b19a2cdffb7f
- MD5 423b6cb743be3eb954378ed41320ea15
- SHA1 16191f2ba450470cf582bea007df4c0c0372346f
- SHA512 452d123c35b140de57b5abbfae606d50e1623bbd54a5e80e715ac66fb12247d9226b1f771530ecbc3b106ad1795672c3333e4d46e74804076b3bc317cab8c194
- SSDEEP 98304:OfYHef36ISn7dIHkD9SOMNTZl0lqEeB+oTwrMR1Fw:vHs36I0x4kDwDTZl0lqJB11Fw
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
7bb7971b3a8ea2cca40382b876c31b7230c90c99a748184c76b0b19a2cdffb7f.apk
Resource
android-x86-arm-20250917-en
Behavioral task
behavioral2
Sample
7bb7971b3a8ea2cca40382b876c31b7230c90c99a748184c76b0b19a2cdffb7f.apk
Resource
android-x64-20250917-en
Behavioral task
behavioral3
Sample
7bb7971b3a8ea2cca40382b876c31b7230c90c99a748184c76b0b19a2cdffb7f.apk
Resource
android-x64-arm64-20250917-en
Malware Config
Extracted
-
lazarus_stealer
-
http://23.95.162.249:1133/check_notifications/
-
http://23.95.162.249:1133/check_version
-
http://23.95.162.249:1133/get_webview_url
-
http://23.95.162.249:1133/send_file
-
target_apps
com.idamob.tinkoff.android
com.wildberries.ru
ru.alfabank.mobile.android
ru.lewis.dbo
ru.rostel
ru.sberbankmobile
ru.vtb24.mobilebanking.android
Targets
-
- Target 7bb7971b3a8ea2cca40382b876c31b7230c90c99a748184c76b0b19a2cdffb7f.bin
- Size 4.3MB
- SHA256 7bb7971b3a8ea2cca40382b876c31b7230c90c99a748184c76b0b19a2cdffb7f
- MD5 423b6cb743be3eb954378ed41320ea15
- SHA1 16191f2ba450470cf582bea007df4c0c0372346f
- SHA512 452d123c35b140de57b5abbfae606d50e1623bbd54a5e80e715ac66fb12247d9226b1f771530ecbc3b106ad1795672c3333e4d46e74804076b3bc317cab8c194
- SSDEEP 98304:OfYHef36ISn7dIHkD9SOMNTZl0lqEeB+oTwrMR1Fw:vHs36I0x4kDwDTZl0lqJB11Fw
- MD5 SHA1 SHA512 SSDEEP
Lazarus_stealer family
Requests changing the default SMS application.