General
- Target tv-ra.apk
- Size 5.8MB
- Sample260523-mesnmsf18l
- SHA256 74959c0e65de9f6a8cf7e6a01a92962c37fd871168e20e0eb1934866172a6d3b
- MD5 6fc46635e0258c12a86caa1af5ff64e1
- SHA1 43a51ece8c51a5d07eb4f4707a80ac3a1da70b98
- SHA512 f9a0f4381f00cf1c659eeb74c4539692fbc2a4fc27e4b066b9518fbd8c5c859368288310bbc6b11b23db18809c9ec6bbc04677044ebab41bb56865c213e4838d
- SSDEEP 98304:9hB57U+SmTtNU0ei4QUBBQDMIQkgGng6mzaaLEIHfyzBIv0mWjMJJ:9hB5o+SmT/U0zuBQD1g8g1zaaLEI/7
- TLSH T1D6560103EB49CA97D8AEC3B26F630CA51A530F58D647ABD705217AAD2D770D10EC1ACC
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
tv-ra.apk
Resource
android-x86-arm-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
tv-ra.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
tv-ra.apk
Resource
android-x64-arm64-20260325-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target tv-ra.apk
- Size 5.8MB
- SHA256 74959c0e65de9f6a8cf7e6a01a92962c37fd871168e20e0eb1934866172a6d3b
- MD5 6fc46635e0258c12a86caa1af5ff64e1
- SHA1 43a51ece8c51a5d07eb4f4707a80ac3a1da70b98
- SHA512 f9a0f4381f00cf1c659eeb74c4539692fbc2a4fc27e4b066b9518fbd8c5c859368288310bbc6b11b23db18809c9ec6bbc04677044ebab41bb56865c213e4838d
- SSDEEP 98304:9hB57U+SmTtNU0ei4QUBBQDMIQkgGng6mzaaLEIHfyzBIv0mWjMJJ:9hB5o+SmT/U0zuBQD1g8g1zaaLEI/7
- TLSH T1D6560103EB49CA97D8AEC3B26F630CA51A530F58D647ABD705217AAD2D770D10EC1ACC
- MD5 SHA1 SHA512 SSDEEP TLSH
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
Acquires the wake lock
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
Requests enabling of the accessibility settings.
MITRE ATT&CK Mobile v16
Tasks
static1
bankertrojaninfostealerratspynote
Score
10/10
behavioral1
bankercollectioncredential_accessdefense_evasiondiscoveryexecutionpersistence
Score
7/10
behavioral2
bankercollectioncredential_accessdefense_evasiondiscoveryexecutionpersistence
Score
7/10
behavioral3
bankercollectioncredential_accessdefense_evasiondiscoveryexecutionpersistence
Score
7/10