Extracted

• • Target
    7af5b0d8ce4f436fc408305317bc42df96be82fb21e88dccb14602470c778ab7.apk
  • Size 1.9MB
  • SHA256 7af5b0d8ce4f436fc408305317bc42df96be82fb21e88dccb14602470c778ab7
  • MD5 8c2a36c0045b831dfa5ea168d1d74874
  • SHA1 424ecf8ea2c4a680b813c0c0bfe58ade5ba5f3d5
  • SHA512 fa5e36de9352374cbdf4a17330d557432d841b0d46506107423ec77bc22896c69538038371f54a662a339fbf643aeaba1f03b4102cbf673ad7b07e396f5bc941
  • SSDEEP 49152:ggmUy5gSiJ9vM40+bhnUwZhr/JU6/LcFUv1g:XqgT9TTbCYra8AU1g
  • TLSH
    T15395F143FB18A46EC8F387358B76462A95029C668B53D3438965B33C3DB79C05E4AFC9
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  bankercollectioncredential_accessdiscoveryevasioncrocodilusimpactinfostealerrattrojan

  • Crocodilus payload

  • Family: Crocodilus

    Crocodilus is a banking malware with extensive remote control capabilities first seen in March 2025.

    bankertrojaninfostealerratcrocodilus

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Performs UI accessibility actions on behalf of the user

    Application may abuse the accessibility service to prevent their removal.

    evasion

  • Reads information about phone network operator.

    discovery
  behavioral1