Overview

overview

7

Static

static

6

orion.apk

android-11-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    orion.apk
  • Size 87.0MB
  • Sample261006-tljsmsfe53
  • SHA256 5c42c4a59cbd381df5a2ec35ea1e3bf8434db3dc68a01acb4144a39a78af208f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
androidbankerdefense_evasiondiscoveryimpact

Malware Config

Targets

    • Target
      orion.apk
    • Size 87.0MB
    • SHA256 5c42c4a59cbd381df5a2ec35ea1e3bf8434db3dc68a01acb4144a39a78af208f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    bankerdefense_evasiondiscoveryimpact

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Reads information about phone network operator.

      discovery

    • Checks the presence of a debugger

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Tasks