0e12caff71b340daedda75fb87e4028964f4f469b4fcd00d3521fd87d32d6162

General

Target
0e12caff71b340daedda75fb87e4028964f4f469b4fcd00d3521fd87d32d6162.apk
Size 12.7MB
Sample260812-3ftv4afp7x
SHA256 0e12caff71b340daedda75fb87e4028964f4f469b4fcd00d3521fd87d32d6162
MD5 1f382667d72b987cdd1d18b3beacc548
SHA1 7f23a0ab728633b41d14b6e1dae63e463c06687f
SHA512 241479f88e7c23ebd5fb4676a8e5966497ba16bb0387d7c81f61a3a34694912ddf66f29dd9e0f992140a65e1f1b9a8d8f7336fb72aa3f357ed46a68330a032e4
SSDEEP 393216:9GABQxOFH6mM+iE7qrVIYaJjqoYqUQJHpJnXCzxwve:EA6EF7M+77Mo/JJRdm
TLSH
T17ED6124BE785764BC4FAC3BA45B6B23511475C214BA3C68BD82CB27C68776F08E94BC4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

android banker c2 defense_evasion evasion exfiltration obfuscated otp persistence stealer

Malware Config

Targets

- Target
  0e12caff71b340daedda75fb87e4028964f4f469b4fcd00d3521fd87d32d6162.apk
- Size 12.7MB
- SHA256 0e12caff71b340daedda75fb87e4028964f4f469b4fcd00d3521fd87d32d6162
- MD5 1f382667d72b987cdd1d18b3beacc548
- SHA1 7f23a0ab728633b41d14b6e1dae63e463c06687f
- SHA512 241479f88e7c23ebd5fb4676a8e5966497ba16bb0387d7c81f61a3a34694912ddf66f29dd9e0f992140a65e1f1b9a8d8f7336fb72aa3f357ed46a68330a032e4
- SSDEEP 393216:9GABQxOFH6mM+iE7qrVIYaJjqoYqUQJHpJnXCzxwve:EA6EF7M+77Mo/JJRdm
- TLSH
  T17ED6124BE785764BC4FAC3BA45B6B23511475C214BA3C68BD82CB27C68776F08E94BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2 behavioral3
- Target
  base.apk
- Size 11.1MB
- SHA256 74f02f96f1221fa18e6c99a7a10e3ef73c1a5dcda6e76ab28590550b9c9add1e
- MD5 c9cfd0f99872157bd7e571238990fe75
- SHA1 7a7060e77d23003f4ac4f53ba2eafdf747416af8
- SHA512 41e7f13c10224c46b6958602175cecebf212f35a3c7ac4700f167ba5b1efc2dcebbd711cbd23500dab85cab35fa39722e972dce2cbc9d65f10b2de45892e66a1
- SSDEEP 196608:FQONaSwYRQr7n9VIQHLNUqpAzs3GU8uvyBL1WF0MOdLOomdahEFTtJs/i:OrG4n9VIMLiqpAz1R00MO1O9dCbK
- TLSH
  T19EC612CBE7C8AB1BC43AC1B9C46772F5510B4C114A969F4BE52C724C38B75E88E95BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion persistence
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  defense_evasion persistence
behavioral4 behavioral5 behavioral6