Overview

overview

10

Static

static

10

b4c7d493da...9d.apk

android-9-x86

7

b4c7d493da...9d.apk

android-10-x64

7

b4c7d493da...9d.apk

android-11-x64

7

User tags

Assigned on submission by the user, not by sandbox detections.

scan:187b9f5de09d82d2afbad9e139600617685095c26c4304aaf67a440338e0a9b6

Sharing

Copy URL Twitter E-mail

General

  • Target
    b4c7d493dafb443a9e03a0f7634ba2a2_SharkBot_187b9f5de09d.apk
  • Size 13.6MB
  • Sample260808-v7tems1gre
  • SHA256 187b9f5de09d82d2afbad9e139600617685095c26c4304aaf67a440338e0a9b6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
sharkbotandroidbankerdefense_evasiondiscoverydropperevasionexecutionexfiltrationimpactinfostealerobfuscatedotppersistenceratspywarestealertrojan

Malware Config

Extracted

Family

  • sharkbot

C2

  • http://statscodicefiscale.xyz/stats/

Targets

    • Target
      b4c7d493dafb443a9e03a0f7634ba2a2_SharkBot_187b9f5de09d.apk
    • Size 13.6MB
    • SHA256 187b9f5de09d82d2afbad9e139600617685095c26c4304aaf67a440338e0a9b6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    bankerdefense_evasiondiscoveryexecutionimpactpersistence

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Checks the application is allowed to request package installs through the package installer

      Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

      defense_evasion

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

      defense_evasionpersistence
    behavioral1behavioral2behavioral3

MITRE ATT&CK Mobile v16

Tasks