智天.apk
- SHA256 c1fe30d5b8f1109c79d647d31ac092547c5199f738ca59fdfaddf02543d79fb6
-
Datzbro payload
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Behavioral task
behavioral1
Sample
智天.apk
Behavioral task
behavioral2
Sample
智天.apk
Behavioral task
behavioral3
Sample
智天.apk
Datzbro is an Android banking trojan, first seen in September 2025.
| resource | yara_rule |
|---|---|
| sample | family_datzbro |
| description | ioc |
|---|---|
| Required by device admin receivers to bind with the system. Allows apps to manage device administration features. | android.permission.BIND_DEVICE_ADMIN |
| description | ioc |
|---|---|
| Required by accessibility services to bind with the system. Allows apps to access accessibility features. | android.permission.BIND_ACCESSIBILITY_SERVICE |
| description | ioc |
|---|---|
| Allows an application to collect component usage statistics. | android.permission.PACKAGE_USAGE_STATS |
| Allows applications to use exact alarm APIs. | android.permission.SCHEDULE_EXACT_ALARM |
| Allows an application to receive SMS messages. | android.permission.RECEIVE_SMS |
| Allows an application to write the user's contacts data. | android.permission.WRITE_CONTACTS |
| Allows an application to send SMS messages. | android.permission.SEND_SMS |
| Allows an application to read SMS messages. | android.permission.READ_SMS |
| Allows an application to read the user's call log. | android.permission.READ_CALL_LOG |
| Allows an application to read the user's contacts data. | android.permission.READ_CONTACTS |
| Allows access to the list of accounts in the Accounts Service. | android.permission.GET_ACCOUNTS |
| Required to be able to access the camera device. | android.permission.CAMERA |
| Allows an application to record audio. | android.permission.RECORD_AUDIO |
| Allows an app to access approximate location. | android.permission.ACCESS_COARSE_LOCATION |
| Allows an app to access precise location. | android.permission.ACCESS_FINE_LOCATION |
| Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. | android.permission.CALL_PHONE |
| Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE |
| Allows an application to read from external storage. | android.permission.READ_EXTERNAL_STORAGE |
| Allows an application to read image files from external storage. | android.permission.READ_MEDIA_IMAGES |
| Allows an application to read video files from external storage. | android.permission.READ_MEDIA_VIDEO |
| Allows an application to read audio files from external storage. | android.permission.READ_MEDIA_AUDIO |
| Allows an application a broad access to external storage in scoped storage. | android.permission.MANAGE_EXTERNAL_STORAGE |
| Allows an application to read from external storage. | android.permission.READ_EXTERNAL_STORAGE |
| Allows an application to write to external storage. | android.permission.WRITE_EXTERNAL_STORAGE |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| 智天.apk |
Datzbro payload
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
android.permission.PACKAGE_USAGE_STATS
android.permission.WRITE_SMS
android.permission.SCHEDULE_EXACT_ALARM
android.permission.USE_EXACT_ALARM
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.ACCESS_NETWORK_STATE
android.permission.CALL_REDIRECTION
android.permission.RECEIVE_SMS
android.permission.WRITE_CONTACTS
android.permission.SEND_SMS
android.permission.SET_WALLPAPER
android.permission.READ_SMS
android.permission.READ_CALL_LOG
android.permission.READ_CONTACTS
android.permission.GET_ACCOUNTS
android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK
android.permission.CAMERA
android.permission.RECORD_AUDIO
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.CALL_PHONE
android.permission.DISABLE_KEYGUARD
android.permission.FOREGROUND_SERVICE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_MEDIA_IMAGES
android.permission.WRITE_MEDIA_VIDEO
android.permission.WRITE_MEDIA_AUDIO
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_VIDEO
android.permission.READ_MEDIA_AUDIO
xsba.ztcbzs.jlerbkvxz_oppo.permission.OPPO_COMPONENT_SAFE
xsba.ztcbzs.jlerbkvxz_oplus.permission.OPLUS_COMPONENT_SAFE
xsba.ztcbzs.jlerbkvxz_com.huawei.permission.external_app_settings.USE_COMPONENT
android.permission.INTERNET
android.permission.BIND_ACCESSIBILITY_SERVICE
android.permission.WAKE_LOCK
android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION
android.permission.MANAGE_EXTERNAL_STORAGE
android.permission.CAPTURE_VIDEO_OUTPUT
android.permission.MEDIA_PROJECTION
xsba.ztcbzs.jlerbkvxz_com.vivo.permission.READ_DOCUMENTS
xsba.ztcbzs.jlerbkvxz_com.vivo.permission.READ_FILES
xsba.ztcbzs.jlerbkvxz_com.vivo.permission.WRITE_DOCUMENTS
xsba.ztcbzs.jlerbkvxz_com.vivo.permission.WRITE_FILES
xsba.ztcbzs.jlerbkvxz.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE