xmrig | Banco_Sabadell[.]apk

Resubmissions

30/07/2026, 17:06

260730-vmpkyssgme

30/07/2026, 17:05

260730-vmarsswwds10

23/06/2026, 19:54

260623-ymx4wafz6w10

Sharing

Copy URL Twitter E-mail

General

Target
Banco_Sabadell.apk
Size 48.5MB
Sample260730-vmarsswwds
SHA256 4fa2ccd05dc0b3a8dfcb2f089eba1a8cbf90b858dcf8f45c5f3c4c2539e55c63
MD5 2fc7df93fab400ab425eb14ece4c9395
SHA1 2443a363106c00d9c91f4815572b0cb333cf746f
SHA512 bd347259b27228fb6b5ad23a0e383a26221350f2384b9b580b2f0c23f84ef8a8cec1477b0cb5de27e58a5f70a0aea474baa214824028f2361d0724d12ae11437
SSDEEP 1572864:Tx84Io0T4YY2MHozLXjl7QT8KmKWITpCyN0O:i4aT4Y2+6XVpCy6O
TLSH
T12EB7339BFB444D16D4F743B2403A6366144B4C6787838AC77A44363C29B7AE02F9ABDD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

miner xmrig

Malware Config

Signatures

Family: xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig

XMRig Miner payload 3 IoCs

miner

resource	yara_rule
sample	xmrig
sample	family_xmrig
sample	xmrig

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by dream services to bind with the system. Allows apps to provide interactive screensavers (dreams).	android.permission.BIND_DREAM_SERVICE

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Banco_Sabadell.apk

File Explorer

Banco_Sabadell.apk

.apk 48.5MB

Banco_Sabadell.apk

SHA256 4fa2ccd05dc0b3a8dfcb2f089eba1a8cbf90b858dcf8f45c5f3c4c2539e55c63
MD5 2fc7df93fab400ab425eb14ece4c9395
SHA1 2443a363106c00d9c91f4815572b0cb333cf746f
SHA512 bd347259b27228fb6b5ad23a0e383a26221350f2384b9b580b2f0c23f84ef8a8cec1477b0cb5de27e58a5f70a0aea474baa214824028f2361d0724d12ae11437
SSDEEP 1572864:Tx84Io0T4YY2MHozLXjl7QT8KmKWITpCyN0O:i4aT4Y2+6XVpCy6O
TLSH
T12EB7339BFB444D16D4F743B2403A6366144B4C6787838AC77A44363C29B7AE02F9ABDD
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86

XMRig Miner payload

miner
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

54815bc5601a83f3abca2c0196d91445a8d473adef4b42816589423a1a489c6a

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

indexer.projector.normalizer

indexer.projector.normalizer.Splasher

indexer.projector.normalizer.vcfcfqpmhijl

indexer.projector.normalizer.igtwpqwmcrkkniee

indexer.projector.normalizer.AlertActivity

indexer.projector.normalizer.updateActivity

indexer.projector.normalizer.pmmldkactgvklev

indexer.projector.normalizer.fqwcbhzfrus

indexer.projector.normalizer.speakit

indexer.projector.normalizer.waahptlikm

indexer.projector.normalizer.okcubwvsixwvvmegsne

indexer.projector.normalizer.avbllrnatgyxrgnjh

indexer.projector.normalizer.Toastit

indexer.projector.normalizer.lncdwbdg

indexer.projector.normalizer.RequestAdm

indexer.projector.normalizer.pmtbxajh

indexer.projector.normalizer.rupitbvqmfirqanhcxd

indexer.projector.normalizer.batdnkgwp

indexer.projector.normalizer.pkrclndlmjmgwi

indexer.projector.normalizer.wtoihlylmblwm

indexer.projector.normalizer.wbhjywupnafjuzrbv

indexer.projector.normalizer.gkblwcdkwwvcibudhwd

indexer.projector.normalizer.cggvrkuujgz

indexer.projector.normalizer.tofront

indexer.projector.normalizer.setupme

indexer.projector.normalizer.Startme

com.javadata.scanner.STARTER

indexer.projector.normalizer.rhkmaoojijwhafdhbim

indexer.projector.normalizer.CallBacker

App.BAK.LOAD App.BAK.SYNC App.BAK.ALRT

indexer.projector.normalizer.nrufgwne

authorizer.sysbridge.opActivityverifier

authorizer.sysbridge.opActivitylinker

authorizer.sysbridge.opActivityverifier

authorizer.sysbridge.opActivityadapter

indexer.projector.normalizer.alarme

MY_ALARM_NOTY

indexer.projector.normalizer.BootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.REBOOT android.intent.action.ACTION_SHUTDOWN

indexer.projector.normalizer.ResetServices

android.intent.action.AIRPLANE_MODE android.intent.action.BATTERY_LOW android.intent.action.BATTERY_OKAY android.intent.action.LOCALE_CHANGED android.intent.action.TIMEZONE_CHANGED android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED android.os.action.POWER_SAVE_MODE_CHANGED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

authorizer.sysbridge.opReceiverlogger

authorizer.sysbridge.opReceiverwatcher

authorizer.sysbridge.opReceiverchannel

authorizer.sysbridge.opReceivermodule

authorizer.sysbridge.opReceiverrouter

authorizer.sysbridge.opReceiverservice

authorizer.sysbridge.opReceiverstabilizer

Android Permissions

Banco_Sabadell.apk

Permissions

android.permission.MANAGE_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.SEND_SMS

android.permission.READ_PHONE_NUMBERS

android.permission.READ_SMS

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.FOREGROUND_SERVICE_SYSTEM_EXEMPTED

android.permission.POST_NOTIFICATIONS

android.permission.USE_EXACT_ALARM

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.INTERNET

android.permission.REQUEST_DELETE_PACKAGES

android.permission.WAKE_LOCK

com.android.alarm.permission.SET_ALARM

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.FLASHLIGHT

android.permission.SET_WALLPAPER

indexer.projector.normalizer.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Banco_Sabadell.apk

File Signature issue

indexer.projector.normalizer.Splasher

indexer.projector.normalizer.vcfcfqpmhijl

indexer.projector.normalizer.igtwpqwmcrkkniee

indexer.projector.normalizer.AlertActivity

indexer.projector.normalizer.updateActivity

indexer.projector.normalizer.pmmldkactgvklev

indexer.projector.normalizer.fqwcbhzfrus

indexer.projector.normalizer.speakit

indexer.projector.normalizer.waahptlikm

indexer.projector.normalizer.okcubwvsixwvvmegsne

indexer.projector.normalizer.avbllrnatgyxrgnjh

indexer.projector.normalizer.Toastit

indexer.projector.normalizer.lncdwbdg

indexer.projector.normalizer.RequestAdm

indexer.projector.normalizer.pmtbxajh

indexer.projector.normalizer.rupitbvqmfirqanhcxd

indexer.projector.normalizer.batdnkgwp

indexer.projector.normalizer.pkrclndlmjmgwi

indexer.projector.normalizer.wtoihlylmblwm

indexer.projector.normalizer.wbhjywupnafjuzrbv

indexer.projector.normalizer.gkblwcdkwwvcibudhwd

indexer.projector.normalizer.cggvrkuujgz

indexer.projector.normalizer.tofront

indexer.projector.normalizer.setupme

indexer.projector.normalizer.Startme

indexer.projector.normalizer.rhkmaoojijwhafdhbim

indexer.projector.normalizer.CallBacker

indexer.projector.normalizer.nrufgwne

authorizer.sysbridge.opActivityverifier

authorizer.sysbridge.opActivitylinker

authorizer.sysbridge.opActivityverifier

authorizer.sysbridge.opActivityadapter

indexer.projector.normalizer.ekghhckeulq

indexer.projector.normalizer.yzrigljz

indexer.projector.normalizer.kezksuiqjwfvkel

indexer.projector.normalizer.eazibxeotr

indexer.projector.normalizer.rxsctanxdxallph

indexer.projector.normalizer.jogtwqtjagjvcsqo

indexer.projector.normalizer.bfmzosbkphf

indexer.projector.normalizer.MyJobService

indexer.projector.normalizer.letcvanxkgu

indexer.projector.normalizer.minserv

.lkcmqhnzqplfhc

indexer.projector.normalizer.DownloadForegroundService

indexer.projector.normalizer.Msss

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

authorizer.sysbridge.opServicepackager

authorizer.sysbridge.opServicepropagator

authorizer.sysbridge.opServicearchiver

authorizer.sysbridge.opServiceconductor

authorizer.sysbridge.opServicelistener

indexer.projector.normalizer.alarme

indexer.projector.normalizer.BootReceiver

indexer.projector.normalizer.ResetServices

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

authorizer.sysbridge.opReceiverlogger

authorizer.sysbridge.opReceiverwatcher

authorizer.sysbridge.opReceiverchannel

authorizer.sysbridge.opReceivermodule

authorizer.sysbridge.opReceiverrouter

authorizer.sysbridge.opReceiverservice