General

  • Target

    NTTsecurity.zip

  • Size

    3.5MB

  • Sample

    210604-g2sqbrp1ja

  • MD5

    04af5ee778aefc9d088f13f619639f27

  • SHA1

    54ccccdf0d45bc2019ddc22fd4480b3908c21210

  • SHA256

    0737b286859cb4bdedc07953a2c436f37c27282a44f49c681a7ab34b53d06c78

  • SHA512

    10f4c9553cff7f5cb4f6b970403e5019e96d313cbcc3cbca3c83a080448fb8e3632b7a973fbc3b69438ed5d96e6b1a8e774b56e79e486c42a94efb431e7f4f4c

Malware Config

Targets

    • Target

      NTTsecurity.apk

    • Size

      3.8MB

    • MD5

      074c48f92d8fb05e559af97fa5b3983c

    • SHA1

      b025ecebd220931b63d7d7033811e0df8322dfbb

    • SHA256

      557519ec2a429618bc7d349ac745aae0861612c4af7d4b4d013cf9c54213131a

    • SHA512

      9ff0a2259d7fb2ce23273d6e4febc76f575e7a7b6fa1de1c56c9b2019db5def3c60b6933865eb9a279a6c2f36a813abe97f5a86ed8ae7a56006a1c92de5b4a18

    • Checks Android system properties for emulator presence.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Tasks