General
- Target 618ee1e79a927c57831527faf19739276f2706b6200ee8f52aa0eb0c66de6828.apk
- Size 7.2MB
- Sample260820-mebp5acf83
- SHA256 618ee1e79a927c57831527faf19739276f2706b6200ee8f52aa0eb0c66de6828
- MD5 07044fee3f744fe647d535dd7e45554e
- SHA1 629726cb335f8363b9422b9de511f46bb944cc5a
- SHA512 8cd08a5380ec5acda28b6dc7709ad0670c4607db101e0ec96246162608817b4867710923d921fa1099a6e1a0d1e96ec70c2dbaf75a1fa692b0b2f48666bd2999
- SSDEEP 196608:RQarJL49aA4jJ4a7M+wX7QaRQ6cWPvVsHtateu1VbQhMXsiZ2:WarJLwaAOf+7Qaa6nVsHtateu11lsw2
- TLSH T1E87601C7EB08D83FC8776573CEAA523332A79D0645836B737508B20829B35994F59BC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
618ee1e79a927c57831527faf19739276f2706b6200ee8f52aa0eb0c66de6828.apk
Resource
android-x86-arm-20260325-en
Behavioral task
behavioral2
Sample
618ee1e79a927c57831527faf19739276f2706b6200ee8f52aa0eb0c66de6828.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral3
Sample
618ee1e79a927c57831527faf19739276f2706b6200ee8f52aa0eb0c66de6828.apk
Resource
android-x64-arm64-20260325-en
Malware Config
Extracted
-
sharkbot
-
https://cdopea.store/stats/
-
target_apps
com.barclays.android.barclaysmobilebanking
com.bankofireland.mobilebanking
com.cooperativebank.bank
ftb.ibank.android
com.nearform.ptsb
uk.co.mbna.cardservices.android
com.danskebank.mobilebank3.uk
com.barclays.bca
com.tescobank.mobile
com.virginmoney.uk.mobile.android
com.monitise.client.android.yorkshire
com.monitise.client.android.clydesdale
com.cooperativebank.smile
com.starlingbank.android
uk.co.metrobankonline.mobile.android.production
uk.co.santander.santanderUK
uk.co.hsbc.hsbcukmobilebanking
uk.co.tsb.newmobilebank
com.grppl.android.shell.BOS
com.grppl.android.shell.halifax
com.grppl.android.shell.CMBlloydsTSB73
it.copergmps.rt.pf.android.sp.bmps
it.extrabanca.mobile
it.relaxbanking
it.bnl.apps.banking
it.bnl.apps.enterprise.hellobank
it.ingdirect.app
it.popso.SCRIGNOapp
it.nogood.container
posteitaliane.posteapp.appbpol
com.latuabancaperandroid
com.latuabancaperandroid.pg
com.latuabancaperandroid.ispb
com.fineco.it
com.CredemMobile
com.bmo.mobile
com.fideuram.alfabetobanking
com.lynxspa.bancopopolare
com.vipera.chebanca
Targets
-
- Target 618ee1e79a927c57831527faf19739276f2706b6200ee8f52aa0eb0c66de6828.apk
- Size 7.2MB
- SHA256 618ee1e79a927c57831527faf19739276f2706b6200ee8f52aa0eb0c66de6828
- MD5 07044fee3f744fe647d535dd7e45554e
- SHA1 629726cb335f8363b9422b9de511f46bb944cc5a
- SHA512 8cd08a5380ec5acda28b6dc7709ad0670c4607db101e0ec96246162608817b4867710923d921fa1099a6e1a0d1e96ec70c2dbaf75a1fa692b0b2f48666bd2999
- SSDEEP 196608:RQarJL49aA4jJ4a7M+wX7QaRQ6cWPvVsHtateu1VbQhMXsiZ2:WarJLwaAOf+7Qaa6nVsHtateu11lsw2
- TLSH T1E87601C7EB08D83FC8776573CEAA523332A79D0645836B737508B20829B35994F59BC6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the mobile country code (MCC)