3d088eefc58b6e39fd16ecda3d4deb0cff0851b358f496aab4a58059f2319e8f

Sharing

Copy URL Twitter E-mail

General

Target
santander.apk
Size 4.9MB
Sample260925-we4wcaga83
SHA256 3d088eefc58b6e39fd16ecda3d4deb0cff0851b358f496aab4a58059f2319e8f
MD5 08fdfae01c6af8981c4b74f7662b9859
SHA1 9cf1e4a8c14c8d9f519b40061289f52cc38af27c
SHA512 213102ce25ae96489b88d38e569a387c2bc7c4ebbf7bdc139efbad0b7df09c0e39cba10c6f9965e6da95a53e6853c062cd2a5ca6ac142a86dbbfedf4f4cbfefa
SSDEEP 98304:9ioxIDK1gVAtz5R40Zy9bFlVH+Z6ogSElMxM1YPhFSZcI:9TxCVAtzEBbFlJSpA+I
TLSH
T18A362246EBE9E91EE9F3C33ACB35556A40468C628347D3878961723C18BB5D05E86FCC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  santander.apk
- Size 4.9MB
- SHA256 3d088eefc58b6e39fd16ecda3d4deb0cff0851b358f496aab4a58059f2319e8f
- MD5 08fdfae01c6af8981c4b74f7662b9859
- SHA1 9cf1e4a8c14c8d9f519b40061289f52cc38af27c
- SHA512 213102ce25ae96489b88d38e569a387c2bc7c4ebbf7bdc139efbad0b7df09c0e39cba10c6f9965e6da95a53e6853c062cd2a5ca6ac142a86dbbfedf4f4cbfefa
- SSDEEP 98304:9ioxIDK1gVAtz5R40Zy9bFlVH+Z6ogSElMxM1YPhFSZcI:9TxCVAtzEBbFlJSpA+I
- TLSH
  T18A362246EBE9E91EE9F3C33ACB35556A40468C628347D3878961723C18BB5D05E86FCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

collection credential_access defense_evasion discovery evasion impact persistence
- Checks Android system properties for emulator presence.
  defense_evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Checks the application is allowed to request package installs through the package installer
  Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).
  defense_evasion
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
- Queries the mobile country code (MCC)
  discovery
- Requests allowing to install additional applications from unknown sources.
  defense_evasion
behavioral1 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6
- Target
  data.sql
- Size 4.6MB
- SHA256 3fbec1b9785dddabe0d04ec3c38dc56d89727b03dfd7c24f1bc29410c4b7dcc1
- MD5 2c474e3b95fa67d8c467f44e15d90ac2
- SHA1 e48246b5af533245d303759b9bd82e3548d9ec8f
- SHA512 f15d456feb9fbd84128c799652de8cbd51a4d9bdd2586027a9a693c8c75e603262a1af3b93da94a22fc9cc520ff083905c8b63a6d3226e9c86f7cce021112381
- SSDEEP 98304:9uiZc0DdbLI0Rc9GDXH/6N4emK+dyFo/KrrXMBBYxMqkZdW51:9uADd4tGDXxK+wUc2Y
- TLSH
  T1DE26DF8BFB44996BC0F753B68536572251478C268B43D7836958363C28BB6D07F8EBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12 behavioral7 behavioral8 behavioral9