Overview

overview

7

Static

static

6

sa.apk

android-15-x64

7

Resubmissions

15/10/2026, 18:47

261015-xflxlabv2x7

15/10/2026, 18:47

261015-xfdafsbv2s6

15/10/2026, 18:42

261015-xcb8zsbt5v6

15/10/2026, 17:53

261015-wgb84st13p7

Sharing

Copy URL Twitter E-mail

General

  • Target
    sa.apk
  • Size 11.7MB
  • Sample261015-xflxlabv2x
  • SHA256 b7aff3bed30b51abb90cc34e049353a44bb81d04de5dc6cfad251a6c4db0a007
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
androidbankercollectioncredential_accessdefense_evasiondiscoveryexecutionpersistence

Malware Config

Targets

    • Target
      sa.apk
    • Size 11.7MB
    • SHA256 b7aff3bed30b51abb90cc34e049353a44bb81d04de5dc6cfad251a6c4db0a007
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    bankercollectioncredential_accessdefense_evasiondiscoveryexecutionpersistence

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

      collectiondefense_evasioncredential_access

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

      collection

    • Reads the contacts stored on the device.

      collection

    • Reads the content of SMS inbox messages.

      collection

    • Acquires the wake lock

    • Queries information about active data network

      discovery

    • Listens for changes in the sensor environment (might be used to detect emulation)

      defense_evasion
    behavioral1

MITRE ATT&CK Mobile v16

Tasks