General

  • Target
    IndusInd Mobile Bank.apk
  • Size 7.1MB
  • Sample260805-llvadathnb
  • SHA256 2ebded3a5850b44e46754afd4c06b9a990f1c7fb25f26dce877135b3d6ded0d0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      IndusInd Mobile Bank.apk
    • Size 7.1MB
    • SHA256 2ebded3a5850b44e46754afd4c06b9a990f1c7fb25f26dce877135b3d6ded0d0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks Android system properties for emulator presence.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Attempts to obfuscate APK file format

      Applies obfuscation techniques to the APK format in order to hinder analysis

    • Checks the application is allowed to request package installs through the package installer

      Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

    • Declares services with permission to bind to the system

    • Queries the mobile country code (MCC)

    • Requests dangerous framework permissions

MITRE ATT&CK Mobile v16

Tasks