General

  • Target
    618ee1e79a927c57831527faf19739276f2706b6200ee8f52aa0eb0c66de6828.apk
  • Size 7.2MB
  • Sample260820-mebp5acf83
  • SHA256 618ee1e79a927c57831527faf19739276f2706b6200ee8f52aa0eb0c66de6828
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • sharkbot

C2
  • https://cdopea.store/stats/

Attributes
  • target_apps

    com.barclays.android.barclaysmobilebanking

    com.bankofireland.mobilebanking

    com.cooperativebank.bank

    ftb.ibank.android

    com.nearform.ptsb

    uk.co.mbna.cardservices.android

    com.danskebank.mobilebank3.uk

    com.barclays.bca

    com.tescobank.mobile

    com.virginmoney.uk.mobile.android

    com.monitise.client.android.yorkshire

    com.monitise.client.android.clydesdale

    com.cooperativebank.smile

    com.starlingbank.android

    uk.co.metrobankonline.mobile.android.production

    uk.co.santander.santanderUK

    uk.co.hsbc.hsbcukmobilebanking

    uk.co.tsb.newmobilebank

    com.grppl.android.shell.BOS

    com.grppl.android.shell.halifax

    com.grppl.android.shell.CMBlloydsTSB73

    it.copergmps.rt.pf.android.sp.bmps

    it.extrabanca.mobile

    it.relaxbanking

    it.bnl.apps.banking

    it.bnl.apps.enterprise.hellobank

    it.ingdirect.app

    it.popso.SCRIGNOapp

    it.nogood.container

    posteitaliane.posteapp.appbpol

rc4.plain

Targets

    • Target
      618ee1e79a927c57831527faf19739276f2706b6200ee8f52aa0eb0c66de6828.apk
    • Size 7.2MB
    • SHA256 618ee1e79a927c57831527faf19739276f2706b6200ee8f52aa0eb0c66de6828
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries the mobile country code (MCC)

MITRE ATT&CK Mobile v16

Tasks