TLP:WHITE5 IOCs
OverlayPhantom: The Android Banking Trojan Hiding in Plain Sight
Threat Actors
Malware Families
Diamond Model
Adversary(2)
Infrastructure(2)
Capability(1)
Victim
5W+H Threat Analysis
Analysis unavailable
Indicators of Compromise
Indicators of Compromise5
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | f8b614a2918378063d6e6655b676ceb52ae65b1510e2cc08087fcac31acb7aeb file-hashintel-blogmalware | High | 56 | Jun 2, 26 |
| SHA256 | 9ef37376bfaa18e193cc72218924ad8ebf56d2667d348f0eae5ae6ec45ab8775 file-hashintel-blogmalware | High | 56 | Jun 2, 26 |
| URL | https://bitlrewards-app.com/api/download/IDAustria intel-blogmalwarenetwork | High | 63 | Jun 2, 26 |
| SHA256 | 8ddc1f2a75f3d5b5bd054a5367bd5015ebc90f3453d63c7cce438c12dc2ae86a file-hashintel-blogmalware | High | 64 | Jun 2, 26 |
| URL | https://199.217.99.122 intel-blogmalwarenetwork | High | 63 | Jun 2, 26 |
IOC Relationship Graph
IOC Relationship Graph5 total IOCs
SHA256URL