Resubmissions

08/06/2026, 18:09

260608-wrqjgsdz9p10

04/06/2026, 15:24

260604-stf62sas6p10

General

  • Target
    86aaed9017e3af5d1d9c8460f2d8164f14e14db01b1a278b4b93859d3cf982f5
  • Size 3.1MB
  • Sample260604-stf62sas6p
  • SHA256 86aaed9017e3af5d1d9c8460f2d8164f14e14db01b1a278b4b93859d3cf982f5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: Connic

    Connic aka SpyBanker is an Android banking trojan first seen in 2017.

  • Android Connic payload 1 IoCs
  • Requests dangerous framework permissions 7 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 86aaed9017e3af5d1d9c8460f2d8164f14e14db01b1a278b4b93859d3cf982f5
    .apk 3.1MB

86aaed9017e3af5d1d9c8460f2d8164f14e14db01b1a278b4b93859d3cf982f5

  • SHA256 86aaed9017e3af5d1d9c8460f2d8164f14e14db01b1a278b4b93859d3cf982f5
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Android Connic payload

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
92afa001374a1c93cee5ade5af4ebfa59cae7d5ad6d2db74a4c6fb148f09198c
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Donald
in.crypto.monitor.coins

Android Permissions

86aaed9017e3af5d1d9c8460f2d8164f14e14db01b1a278b4b93859d3cf982f5

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.RECEIVE_MMS

android.permission.WAKE_LOCK

android.permission.VIBRATE

com.google.android.c2dm.permission.RECEIVE

in.crypto.monitor.coins.permission.C2D_MESSAGE