Examining New DawDropper Banking Dropper and DaaS on the Dark Web
SHA-256
Package name
Release date
Detection name
C&C server
Payload address
Payload family
022a01566d6033f6d90ab182c4e69f80a3851565aaaa386c8fa1a9435cb55c91
com.caduta.aisevsk
05/01/2021
AndroidOS_DawDropper.HRX
call-recorder-66f03-default-rtdb[.]firebaseio[.]com
hxxps://github.com/uliaknazeva888/qs/raw/main/1.apk
Octo
e1598249d86925b6648284fda00e02eb41fdcc75559f10c80acd182fd1f0e23a
com.vpntool.androidweb
11/07/2021
AndroidOS_DawDropper.HRXA
rooster-945d8-default-rtdb[.]firebaseio[.]com
hxxps://github.com/butcher65/test/raw/main/golgofan.apk
Hydra
8fef8831cbc864ffe16e281b0e4af8e3999518c15677866ac80ffb9495959637
com.j2ca.callrecorder
11/11/2021
AndroidOS_DawDropper.HRXA
call-recorder-ad77f-default-rtdb[.]firebaseio[.]com
hxxps://github.com/butcher65/test/raw/main/gala.apk
Octo
05b3e4071f62763b3925fca9db383aeaad6183c690eecbbf532b080dfa6a5a08
com.codeword.docscann
11/21/2021
AndroidOS_DawDropper.HRXA
doc-scanner-cff1d-default-rtdb[.]firebaseio[.]com
hxxps://github.com/lotterevich/lott/raw/main/maina.apk
TeaBot
f4611b75113d31e344a7d37c011db37edaa436b7d84ca4dfd77a468bdeff0271
com.virtualapps.universalsaver
12/09/2021
AndroidOS_DawDropper.HRXA
universalsaverpro-default-rtdb[.]firebaseio[.]com
hxxps://github.com/uliaknazeva888/qs/raw/main/1.apk
Octo
a1298cc00605c79679f72b22d5c9c8e5c8557218458d6a6bd152b2c2514810eb
com.techmediapro.photoediting
01/04/2022
AndroidOS_DawDropper.HRXA
eaglephotoeditor-2d4e5-default-rtdb[.]firebaseio[.]com
hxxps://github.com/butcher65/test/raw/main/lolipop.apk
Hydra
eb8299c16a311ac2412c55af16d1d3821ce7386c86ae6d431268a3285c8e81fb
com.chestudio.callrecorder
01/2022
AndroidOS_DawDropper.HRXA
call-recorder-pro-371bc-default-rtdb.firebaseio.com
hxxps://github.com/sherrytho/test/raw/main/golgol.apk
Hydra
d5ac8e081298e3b14b41f2134dae68535bcf740841e75f91754d3d0c0814ed42
com.casualplay.leadbro
04/23/2022
AndroidOS_DawDropper.HRXA
loader-acb47-default-rtdb[.]firebaseio[.]com
hxxps://github.com/briangreen7667/2705/raw/main/addon2.apk
Hydra
b4bd13770c3514596dd36854850a9507e5734374083a0e4299c697b6c9b9ec58
com.utilsmycrypto.mainer
05/04/2022
AndroidOS_DawDropper.HRXA
crypto-utils-l-default-rtdb[.]firebaseio[.]com
hxxps://github.com/asFirstYouSaid/test/raw/main/110.apk
hxxps://github.com/asFirstYouSaid/test/raw/main/SecureChat%20(1).apk
Ermac
77f226769eb1a886606823d5b7832d92f678f0c2e1133f3bbee939b256c398aa
com.cleaner.fixgate
05/14/2022
AndroidOS_DawDropper.HRXA
fixcleaner-60e32-default-rtdb[.]firebaseio[.]com
hxxps://github.com/butcher65/test/raw/main/latte.apk
Hydra
5ee98b1051ccd0fa937f681889e52c59f33372ffa27afff024bb76d9b0446b8a
com.olivia.openpuremind
05/23/2022
AndroidOS_DawDropper.HRX
crypto-sequence-default-rtdb[.]firebaseio.com
N/A
N/A
0ebcf3bce940daf4017c85700ffc72f6b3277caf7f144a69fbfd437d1343b4ab
com.myunique.sequencestore
2022/05/31
AndroidOS_DawDropper.HRX
coin-flow-a179b-default-rtdb.firebaseio.com
N/A
N/A
2113451a983916b8c7918c880191f7d264f242b815b044a6351c527f8aeac3c8
com.flowmysequto.yamer
05/2022
AndroidOS_DawDropper.HRX
incrypted-app-default-rtdb.firebaseio.com
N/A
N/A
71c44a78cd77a8f5767096f268c3193108ac06ff3779c65e78bc879d3b0ff11d
com.qaz.universalsaver
05/2022
AndroidOS_DawDropper.HRX
saver-9a43a-default-rtdb[.]firebaseio.com
hxxps://raw.githubusercontent.com/asFirstYouSaid/awdaw/main/Xnode_new.apk
hxxps://raw.githubusercontent.com/asFirstYouSaid/test/main/GoogleMaps%20(2)_obf.apk
Ermac
9b2064f8808d3aaa2d3dc9f5c7ee0775b29e29df3a958466a8953f148b702461
com.luckyg.cleaner
06/02/2022
AndroidOS_DawDropper.HRXA
lucky-cleaner-default-rtdb[.]firebaseio[.]com
hxxps://github.com/gohhas/gate/raw/main/live.apk
Octo
ff8110883628f8d926588c0b7aedae8841df989d50f32c140d88f1105d1d3e02
com.scando.qukscanner
06/28/2022
AndroidOS_DawDropper.HRX
cleaner-f40c4-default-rtdb[.]firebaseio[.]com
hxxps://raw.githubusercontent.com/k6062019/qq/main/clown.apk
Octo
02499a198a8be5e203b7929287115cc84d286fc6afdb1bc84f902e433a7961e4
com.qrdscannerratedx
07/01/2022
AndroidOS_DawDropper.HRX
Qrscanner-f6d8d-default-rtdb.firebaseio.com
hxxps://raw.githubusercontent.com/k6062019/qq/main/clown.apk
Octo
Read More HERE
