SharkBot: a “new” generation Android banking Trojan being distributed on Google Play Store
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Direct Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Keylogging - T1056.001 Keylogging - T1417.001 Malware - T1587.001 Malware - T1588.001 Multi-Factor Authentication - T1556.006 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004 Sms Messages - T1636.004
Show in Graph
Common Information
Type Value
UUID 82a70085-1111-449d-b293-b0cf0ce74020
Fingerprint 36253d488de336cb
Analysis status DONE
Considered CTI value 2
Text language
Published March 3, 2022, 7:05 p.m.
Added to db Sept. 11, 2022, 12:36 p.m.
Last updated Nov. 17, 2024, 2:49 p.m.
Headline SharkBot: a “new” generation Android banking Trojan being distributed on Google Play Store
Title SharkBot: a “new” generation Android banking Trojan being distributed on Google Play Store
Detected Hints/Tags/Attributes 60/2/17
Source URLs
Redirection Url
Details Source https://research.nccgroup.com/2022/03/03/sharkbot-a-new-generation-android-banking-trojan-being-distributed-on-google-play-store/
URL Provider
Details Provider Source level domain
Details nccgroup.com research.nccgroup.com
Attributes
Details Type #Events CTI Value
Details Domain 317 
bit.ly
Details Domain 3 
statscodicefiscale.xyz
Details Domain 74 
play.google.com
Details Domain 2 
com.abbondioendrizzi.tools
Details Domain 2 
n3bvakjjouxir0zkzmd.xyz
Details Domain 2 
mjayoxbvakjjouxir0z.xyz
Details sha256 2 
a56dacc093823dc1d266d68ddfba04b2265e613dcc4b69f350873b485b9e1f1c
Details sha256 3 
9701bef2231ecd20d52f8fd2defa4374bffc35a721e4be4519bda8f5f353e27a
Details sha256 2 
20e8688726e843e9119b33be88ef642cb646f1163dce4109b8b8a2c792b5f9fc
Details sha256 2 
187b9f5de09d82d2afbad9e139600617685095c26c4304aaf67a440338e0a9b6
Details IPv4 2 
185.219.221.99
Details Url 2 
http://statscodicefiscale.xyz/stats
Details Url 2 
https://bit.ly/34aruxi
Details Url 1 
https://play.google.com/store/apps/details?id=com.abbondioendrizzi.antivirus.supercleaner
Details Url 1 
https://play.google.com/store/apps/details?id=com.abbondioendrizzi.tools.supercleaner
Details Url 1 
https://play.google.com/store/apps/details?id=com.pagnotto28.sellsourcecode.alpha
Details Url 1 
https://play.google.com/store/apps/details?id=com.pagnotto28.sellsourcecode.supercleaner