Android trojans.zip
- SHA256 5c42d9fcd967c4021144f9cb88fe7e58847ab0488257d8b3f15f08110a5c9ff1
Overview
overview
10Static
static
102FA Authenticator.apk
android-9-x86
72FA Authenticator.apk
android-10-x64
72FA Authenticator.apk
android-11-x64
7All Passwords.apk
android-11-x64
8ICICI Rewards.apk
android-9-x86
7ICICI Rewards.apk
android-10-x64
7ICICI Rewards.apk
android-11-x64
7Kylhavy Mo...ty.apk
android-9-x86
6Kylhavy Mo...ty.apk
android-10-x64
6Kylhavy Mo...ty.apk
android-11-x64
1_Antivirus...id.apk
android-9-x86
6_Antivirus...id.apk
android-10-x64
6_Antivirus...id.apk
android-11-x64
6test.apk
android-9-x86
6test.apk
android-10-x64
7test.apk
android-11-x64
7Behavioral task
behavioral1
Sample
2FA Authenticator.apk
Resource
android-x86-arm-20250917-en
Behavioral task
behavioral2
Sample
2FA Authenticator.apk
Resource
android-x64-20250917-en
Behavioral task
behavioral3
Sample
2FA Authenticator.apk
Resource
android-x64-arm64-20250917-en
Behavioral task
behavioral4
Sample
All Passwords.apk
Resource
android-x64-arm64-20250917-en
Behavioral task
behavioral5
Sample
ICICI Rewards.apk
Resource
android-x86-arm-20250917-en
Behavioral task
behavioral6
Sample
ICICI Rewards.apk
Resource
android-x64-20250917-en
Behavioral task
behavioral7
Sample
ICICI Rewards.apk
Resource
android-x64-arm64-20250917-en
Behavioral task
behavioral8
Sample
Kylhavy Mobile Security.apk
Resource
android-x86-arm-20250917-en
Behavioral task
behavioral9
Sample
Kylhavy Mobile Security.apk
Resource
android-x64-20250917-en
Behavioral task
behavioral10
Sample
Kylhavy Mobile Security.apk
Resource
android-x64-arm64-20250917-en
Behavioral task
behavioral11
Sample
_Antivirus Android.apk
Resource
android-x86-arm-20250917-en
Behavioral task
behavioral12
Sample
_Antivirus Android.apk
Resource
android-x64-20250917-en
Behavioral task
behavioral13
Sample
_Antivirus Android.apk
Resource
android-x64-arm64-20250917-en
Behavioral task
behavioral14
Sample
test.apk
Resource
android-x86-arm-20250917-en
Behavioral task
behavioral15
Sample
test.apk
Resource
android-x64-20250917-en
Behavioral task
behavioral16
Sample
test.apk
Resource
android-x64-arm64-20250917-en
sharkbot
http://mefika.me/
com.example.creatersa
com.barclays.android.barclaysmobilebanking
com.bankofireland.mobilebanking
com.cooperativebank.bank
ftb.ibank.android
com.nearform.ptsb
uk.co.mbna.cardservices.android
com.danskebank.mobilebank3.uk
com.barclays.bca
com.tescobank.mobile
com.virginmoney.uk.mobile.android
com.monitise.client.android.yorkshire
com.monitise.client.android.clydesdale
com.cooperativebank.smile
com.starlingbank.android
uk.co.metrobankonline.mobile.android.production
uk.co.santander.santanderUK
uk.co.hsbc.hsbcukmobilebanking
uk.co.tsb.newmobilebank
com.grppl.android.shell.BOS
com.grppl.android.shell.halifax
com.grppl.android.shell.CMBlloydsTSB73
it.copergmps.rt.pf.android.sp.bmps
it.extrabanca.mobile
it.relaxbanking
it.bnl.apps.banking
it.bnl.apps.enterprise.hellobank
it.ingdirect.app
it.popso.SCRIGNOapp
it.nogood.container
posteitaliane.posteapp.appbpol
com.latuabancaperandroid
com.latuabancaperandroid.pg
com.latuabancaperandroid.ispb
com.fineco.it
com.CredemMobile
com.bmo.mobile
com.fideuram.alfabetobanking
com.lynxspa.bancopopolare
com.vipera.chebanca
| resource | yara_rule |
|---|---|
| static1/unpack001/All Passwords.apk | family_abstractemu |
| static1/unpack001/Phone Plus.apk | family_abstractemu |
| description | ioc |
|---|---|
| Required by accessibility services to bind with the system. Allows apps to access accessibility features. | android.permission.BIND_ACCESSIBILITY_SERVICE |
| Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device. | android.permission.BIND_NOTIFICATION_LISTENER_SERVICE |
| description | ioc |
|---|---|
| Required to be able to access the camera device. | android.permission.CAMERA |
| Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. | android.permission.SYSTEM_ALERT_WINDOW |
| Allows an application to request installing packages. | android.permission.REQUEST_INSTALL_PACKAGES |
AbstractEmu payload
AbstractEmu payload