asacub | 158c7688877853ffedb572ccaa8aa9eff47fa379338151f486e46d8983ce1b67

General

Target
158c7688877853ffedb572ccaa8aa9eff47fa379338151f486e46d8983ce1b67
Size 18KB
Sample260519-jeev1acz2k
SHA256 158c7688877853ffedb572ccaa8aa9eff47fa379338151f486e46d8983ce1b67
MD5 04540006525f646e2583ed349503ac2f
SHA1 6f74e230a1fc6db5a616e1df14885444edcd8819
SHA512 d0368db6aa1136f5280477ab2f3499bca98c7674fa90b0986457a12685d6d11d11c0df97c8fe95e399e9a3f95f30429f2ce023ee46a19f1d8b5ba09cb4b7c2af
SSDEEP 384:oquIBPGcfRCo/jUG/nGPplzp3okoZj0rT/7UukuuT:NB+O9/AempxbkMT/7UPuuT
TLSH
T10B82C04103A3A517EEA394355F1D4A511F34FA98A071430E5960ED502F4FBF9FB6E634
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

banker asacub

Malware Config

Signatures

Family: Asacub
Asacub is an Android banking trojan first seen in 2015.
banker asacub

Android Asacub payload 1 IoCs

resource	yara_rule
sample	family_asacub

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
158c7688877853ffedb572ccaa8aa9eff47fa379338151f486e46d8983ce1b67

File Explorer

158c7688877853ffedb572ccaa8aa9eff47fa379338151f486e46d8983ce1b67

.apk 18KB

158c7688877853ffedb572ccaa8aa9eff47fa379338151f486e46d8983ce1b67

SHA256 158c7688877853ffedb572ccaa8aa9eff47fa379338151f486e46d8983ce1b67
MD5 04540006525f646e2583ed349503ac2f
SHA1 6f74e230a1fc6db5a616e1df14885444edcd8819
SHA512 d0368db6aa1136f5280477ab2f3499bca98c7674fa90b0986457a12685d6d11d11c0df97c8fe95e399e9a3f95f30429f2ce023ee46a19f1d8b5ba09cb4b7c2af
SSDEEP 384:oquIBPGcfRCo/jUG/nGPplzp3okoZj0rT/7UukuuT:NB+O9/AempxbkMT/7UPuuT
TLSH
T10B82C04103A3A517EEA394355F1D4A511F34FA98A071430E5960ED502F4FBF9FB6E634
MD5 SHA1 SHA512 SSDEEP TLSH

android

Android Asacub payload
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

c46f3e31b672df124e86c6eddedf07849619fc0d630fc8cb8ba9103dd7b99be5

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Yezl,OU=Wsr,O=Oddo,L=Zap,ST=Nxvnio,C=Ysmt

com.recover.scan

Android Permissions

158c7688877853ffedb572ccaa8aa9eff47fa379338151f486e46d8983ce1b67

Permissions

android.permission.READ_CONTACTS

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.READ_PHONE_STATE

android.permission.INTERNET

android.permission.CALL

com.android.alarm.permission.SET_ALARM

android.permission.BIND_ACCESSIBILITY_SERVICE

158c7688877853ffedb572ccaa8aa9eff47fa379338151f486e46d8983ce1b67

File Signature issue

com.recover.scan.Mine

com.recover.scan.SoarStore

com.recover.scan.RelativeAcute

com.recover.scan.Double

com.recover.scan.Veil

com.recover.scan.LikelyDistant

com.recover.scan.DriverNuance

com.recover.scan.Fleet

com.recover.scan.Bathtub

com.recover.scan.ProjectionCutting

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

158c7688877853ffedb572ccaa8aa9eff47fa379338151f486e46d8983ce1b67

File Signature issue

com.recover.scan.Mine

com.recover.scan.SoarStore

com.recover.scan.RelativeAcute

com.recover.scan.Double

com.recover.scan.Veil

com.recover.scan.LikelyDistant

com.recover.scan.DriverNuance

com.recover.scan.Fleet

com.recover.scan.Bathtub

com.recover.scan.ProjectionCutting

Android Permissions

158c7688877853ffedb572ccaa8aa9eff47fa379338151f486e46d8983ce1b67