General
- Target JaffaCakes118_3d1d1380926cad6e57c7c54c4aa28454
- Size 260KB
- Sample251221-wk5d3ahn3v
- SHA256 1e946d2c30ba6758814fca671a59e48c547a8ec414e986a5d37946c32a6b0ee1
- MD5 3d1d1380926cad6e57c7c54c4aa28454
- SHA1 c51ea6d31abe20549f1c9fa4e4132bd4e037f079
- SHA512 4d7e8e3cd1f1929a5ac60c2911ca0504fcb5d7d2c647ec42591aa64e99391b607aad605af2891ebb2a0e8033b067e55e2c5ae111cfad01268abd6f8b6d80cff2
- SSDEEP 6144:U5DHJFr764sAos5wMK8NBozZAGORjszgcNMcnxgQk+pzSb:cDjs1s5wYWcOzG
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Extracted
-
anubis
-
http://ktosdelaetskrintotpidor.com
-
http://sositehuypidarasi.com
-
https://adobejiljiouoijlnji9.com
-
target_apps
MyING.be
alior.bankingapp.android
at.easybank.securityapp
at.psa.app.bawag
at.spardat.bcrmobile
at.spardat.netbanking
au.com.bankwest.mobile
au.com.cua.mb
au.com.mebank.banking
au.com.nab.mobile
au.com.newcastlepermanent
au.com.suncorp.SuncorpBank
ccom.tmob.denizbank
com.DijitalSahne.EnYakinHalkbank
com.FubonMobileClient
com.MobileTreeApp
com.advantage.RaiffeisenBank
com.aff.otpdirekt
com.amazon.windowshop
com.axis.mobile
com.bankaustria.android.olb
com.bankia.wallet
com.bankinter.launcher
com.bankofamerica.cashpromobile
com.bankofqueensland.boq
com.barclays.android.barclaysmobilebanking
com.barclays.ke.mobile.android.ui
com.bbva.bbvawallet
com.bbva.netcash
com.binance.dev
com.binance.odapplications
com.bitcoin.ss.zebpayindia
com.blockfolio.blockfolio
com.bmo.mobile
com.boursorama.android.clients
com.bssys.vtb.mobileclient
com.btcturk
com.caisseepargne.android.mobilebanking
com.cba.android.netbank
com.chase.sig.android
com.cibc.android.mobi
com.citi.citimobile
com.clairmail.fth
com.cleverlance.csas.servis24
com.cm_prod.nosactus
com.coin.profit
com.coinbase.android
com.coins.bit.local
com.coins.ful.bit
com.comarch.mobile.banking.bgzbnpparibas.biznes
com.comarch.security.mobilebanking
com.crypter.cryptocyrrency
com.csam.icici.bank.imobile
com.db.mm.deutschebank
com.dbs.hk.dbsmbanking
com.de.dkb.portalapp
com.ebay.mobile
com.edsoftapps.mycoinsvalue
com.empik.empikapp
com.empik.empikfoto
com.fi6122.godough
com.finanteq.finance.ca
com.fragment.akbank
com.fusion.ATMLocator
com.garantiyatirim.fx
com.getingroup.mobilebanking
com.grppl.android.shell.BOS
com.grppl.android.shell.CMBlloydsTSB73
com.grppl.android.shell.halifax
com.hangseng.rbmobile
com.htsu.hsbcpersonalbanking
com.idbi.mpassbook
com.ideomobile.hapoalim
com.imb.banking2
com.infrasofttech.indianBank
com.ing.diba.mbbr2
com.ing.mobile
com.isis_papyrus.raiffeisen_pay_eyewdg
com.jackpf.blockchainsearch
com.jamalabbasii1998.localbitcoin
com.kryptokit.jaxx
com.kutxabank.android
com.kuveytturk.mobil
com.localbitcoins.exchange
com.localbitcoinsmbapp
com.magiclick.odeabank
com.mal.saul.coinmarketcap
com.matriksdata.ziraatyatirim.pad
com.mobikwik_new
com.mobillium.papara
com.moneybookers.skrillpayments
com.moneybookers.skrillpayments.neteller
com.monitise.isbankmoscow
com.mtel.androidbea
com.orangefinansek
com.oxigen.oxigenwallet
com.palatine.android.mobilebanking.prod
com.paypal.android.p2pmobile
com.portfolio.coinbase_tracker
com.pozitron.albarakaturk
com.pozitron.iscep
com.pozitron.vakifbank
com.quickmobile.anzirevents15
com.rbc.mobile.android
com.rbs.mobile.android.natwestbandc
com.rbs.mobile.android.rbsbandc
com.rbs.mobile.android.ubr
com.redrockdigimark
com.rsi
com.santander.app
com.sbi.SBIFreedomPlus
com.scb.breezebanking.hk
com.scotiabank.mobile
com.snapwork.hdfc
com.sovereign.santander
com.starfinanz.smob.android.sbanking
com.starfinanz.smob.android.sfinanzstatus.tablet
com.suntrust.mobilebanking
com.td
com.teb
com.tecnocom.cajalaboral
com.thunkable.android.manirana54.LocalBitCoins
com.thunkable.android.manirana54.LocalBitCoins_unblock
com.thunkable.android.santoshmehta364.UNOCOIN_LIVE
com.tmob.tabletdeniz
com.tnx.apps.coinportfolio
com.unionbank.ecommerce.mobile.commercial.legacy
com.unionbank.ecommerce.mobile.commercial.legacy
com.unocoin.unocoinmerchantPoS
com.unocoin.unocoinwallet
com.usaa.mobile.android.usaa
com.usbank.mobilebanking
com.vakifbank.mobilel
com.veripark.ykbaz
com.wellsFargo.ceomobile
com.yinzcam.facilities.verizon
cz.airbank.android
cz.csob.smartbanking
cz.sberbankcz
de.comdirect.android
de.commerzbanking.mobil
de.consorsbank
de.fiducia.smartphone.android.banking.vr
de.postbank.finanzassistent
de.schildbach.wallet
es.bancopopular.nbmpopular
es.evobanco.bancamovil
es.lacaixa.mobile.android.newwapicon
eu.eleader.mobilebanking.invest
eu.eleader.mobilebanking.pekao
eu.eleader.mobilebanking.pekao.firm
eu.eleader.mobilebanking.raiffeisen
eu.inmite.prj.kb.mobilbank
fr.axa.monaxa
fr.banquepopulaire.cyberplus
fr.creditagricole.androidapp
fr.laposte.lapostetablet
fr.lcl.android.customerarea
hdfcbank.hdfcquickbank
hk.com.hsbc.hsbchkmobilebanking
hr.asseco.android.jimba.mUCI.ro
in.co.bankofbaroda.mpassbook
info.blockchain.merchant
io.getdelta.android
jp.co.aeonbank.android.passbook
jp.co.netbk
jp.co.rakuten_bank.rakutenbank
jp.co.sevenbank.AppPassbook
jp.co.smbc.direct
jp.mufg.bk.applisp.app
may.maybank.android
me.doubledutch.hvdnz.cbnationalconference2016
mobi.societegenerale.mobile.lappli
mobile.santander.de
net.bnpparibas.mescomptes
nz.co.anz.android.mobilebanking
nz.co.asb.asbmobile
nz.co.bnz.droidbanking
nz.co.kiwibank.mobile
nz.co.westpac
org.banksa.bank
org.bom.bank
org.stgeorge.bank
piuk.blockchain.android
pl.aliorbank.aib
pl.allegro
pl.bosbank.mobile
pl.bph
pl.bps.bankowoscmobilna
pl.bzwbk.bzwbk24
pl.bzwbk.ibiznes24
pl.bzwbk.mobile.tab.bzwbk24
pl.ceneo
pl.com.rossmann.centauros
pl.fmbank.smart
pl.ideabank.mobilebanking
pl.ing.mojeing
pl.ipko.mobile
pl.mbank
pl.millennium.corpApp
pl.orange.mojeorange
pl.pkobp.iko
pl.pkobp.ipkobiznes
ro.btrl.mobile
ru.alfadirect.app
ru.mw
ru.sberbank.sberbankir
ru.tinkoff.goabroad
sk.sporoapps.skener
tr.com.sekerbilisim.mbank
wit.android.bcpBankingApp.millenniumPL
wos.com.zebpay
zebpay.Application