Overview

overview

10

Static

static

6

_6eb525100...f5.apk

android-9-x86

10

_6eb525100...f5.apk

android-10-x64

10

_6eb525100...f5.apk

android-11-x64

10

Analysis

  • max time kernel
    3s
  • max time network
    150s
  • platform
    android-10_x64
  • resource
    android-x64-20260104-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260104-enlocale:en-usos:android-10-x64system
  • submitted
    13/01/2026, 15:38

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    _6eb525100f54b9a830cd2d0f1169b053edb55332b2be73dd29a8b165b9ccdbf5.apk
  • Size 6.4MB
  • Sample260113-s3fxmsbv9b
  • SHA256 6eb525100f54b9a830cd2d0f1169b053edb55332b2be73dd29a8b165b9ccdbf5
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
bankerevasiontrickmoinfostealertrojan

Malware Config

Extracted

Family

  • trickmo

C2

  • http://rent-car-italy.org/vyymlhzywalde

Signatures

  • TrickMo

    TrickMo is an Android banking trojan with the capability to intercept 2FA codes first seen in September 2019.

    trojaninfostealerbankertrickmo
  • Trickmo family
    trickmo
  • Loads dropped Dex/Jar 1 TTPs 4 IoCs

    Runs executable file dropped to the device during analysis.

    evasion

Processes

  • semplo.ic327.skin
    1⤵
    • Loads dropped Dex/Jar
    PID:5056

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        iMpd.json
        • Path /data/data/semplo.ic327.skin/app_brown/iMpd.json
        • Size 4.9MB
        • SHA256 0863510b47cd8c2a3aa82d4aaec650cc905fee726d4b477e52816488d083becc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iMpd.json
        • Path /data/data/semplo.ic327.skin/app_brown/iMpd.json
        • Size 4.9MB
        • SHA256 9c03c212282d9fb622175dff56e5598d8cc2f7f64964fe8e82aad642d88512cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iMpd.json
        • Path /data/user/0/semplo.ic327.skin/app_brown/iMpd.json
        • Size 10.9MB
        • SHA256 6c84643bdddc36a15b515e72e8b768ba64ff6b8966492db9bce6660934f09746
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        iMpd.json!classes2.dex
        • Path /data/user/0/semplo.ic327.skin/app_brown/iMpd.json!classes2.dex
        • Size 308KB
        • SHA256 475a3fd3eaff955f160e2d2b8176d628c5a2a9289b22052f2decb42c865939b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        iMpd.json!classes3.dex
        • Path /data/user/0/semplo.ic327.skin/app_brown/iMpd.json!classes3.dex
        • Size 265KB
        • SHA256 af13d84b401be0b6514dc4efe1ca42db30e1749fdf0f880deb1300e0e76b4d9a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        iMpd.json!classes4.dex
        • Path /data/user/0/semplo.ic327.skin/app_brown/iMpd.json!classes4.dex
        • Size 1.7MB
        • SHA256 c79795ea1d8f93d6471a6a10ae92f079fa7c79b0736de04edb53c5c5ae4862e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download