Resubmissions

26/06/2026, 10:15

260626-maf42sbs8r10

26/06/2026, 08:37

260626-kjhccsax4p10

General

  • Target
    dfda8e52df5ba1852d518220363f81a06f51910397627df6cdde98d15948de65
  • Size 602KB
  • Sample260626-maf42sbs8r
  • SHA256 dfda8e52df5ba1852d518220363f81a06f51910397627df6cdde98d15948de65
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: Xbot

    Xbot is an Android banking trojan first seen in 2015.

  • Android Xbot payload 1 IoCs
  • Requests dangerous framework permissions 8 IoCs
  • Insecure Codesign Algorithm 1 IoCs

    File was codesigned using an insecure algorithm.

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • dfda8e52df5ba1852d518220363f81a06f51910397627df6cdde98d15948de65
    .apk 602KB

dfda8e52df5ba1852d518220363f81a06f51910397627df6cdde98d15948de65

  • SHA256 dfda8e52df5ba1852d518220363f81a06f51910397627df6cdde98d15948de65
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Android Xbot payload

  • Insecure Codesign Algorithm

    File was codesigned using an insecure algorithm.

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
86043d1a1ff6d894aedacd9d8395f4d2f9f99440
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Unknown,OU=Unknown,O=Unknown,L=Unknown,ST=Unknown,C=UK
Chains

Jan 1, 0001

com.xbot.core

Android Permissions

dfda8e52df5ba1852d518220363f81a06f51910397627df6cdde98d15948de65

Permissions

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_SMS

android.permission.RECEIVE_SMS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.SEND_SMS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.READ_CONTACTS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_MOCK_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.BIND_DEVICE_ADMIN

android.permission.GET_TASKS

android.permission.ACCESS_NETWORK_STATE