General
- Target IndusInd Mobile Bank.apk
- Size 7.1MB
- Sample260805-llvadathnb
- SHA256 2ebded3a5850b44e46754afd4c06b9a990f1c7fb25f26dce877135b3d6ded0d0
- MD5 9a0180c9d871d1b36f960dbe7dc51c16
- SHA1 fd2b44492ff8ef55592e240b7bd3edef52fd426f
- SHA512 635f999ee29ed879e544d93aa0721f9eb357f4fbeffb3badf31cab8f5289883c8f5168162c441e959f491b787e9c18b5554a533802909323e35ef380a668a269
- SSDEEP 196608:6kbAk5Jp7lrnueqlzZ+g3R7o+jwuIJ+Qur:HbPHHd8zZ+yXjwuuBs
- TLSH T16676128BA385472BC52EC17E54E333B663135D0546E2833BD66CBA1C78771F4AE98B90
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
IndusInd Mobile Bank.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral2
Sample
IndusInd Mobile Bank.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral3
Sample
IndusInd Mobile Bank.apk
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral4
Sample
IndusInd Mobile Bank.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
IndusInd Mobile Bank.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
IndusInd Mobile Bank.apk
Resource
android-x86-arm-20260325-en
Malware Config
Targets
-
- Target IndusInd Mobile Bank.apk
- Size 7.1MB
- SHA256 2ebded3a5850b44e46754afd4c06b9a990f1c7fb25f26dce877135b3d6ded0d0
- MD5 9a0180c9d871d1b36f960dbe7dc51c16
- SHA1 fd2b44492ff8ef55592e240b7bd3edef52fd426f
- SHA512 635f999ee29ed879e544d93aa0721f9eb357f4fbeffb3badf31cab8f5289883c8f5168162c441e959f491b787e9c18b5554a533802909323e35ef380a668a269
- SSDEEP 196608:6kbAk5Jp7lrnueqlzZ+g3R7o+jwuIJ+Qur:HbPHHd8zZ+yXjwuuBs
- TLSH T16676128BA385472BC52EC17E54E333B663135D0546E2833BD66CBA1C78771F4AE98B90
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks Android system properties for emulator presence.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis
-
Checks the application is allowed to request package installs through the package installer
Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).
-
Declares services with permission to bind to the system
-
Queries the mobile country code (MCC)
-
Requests dangerous framework permissions