Resubmissions

24-11-2022 17:19

221124-vvwn8shb86 10

04-10-2021 10:57

211004-m19jaagcbr 7

General

  • Target

    NTTsecurity.apk

  • Size

    1MB

  • Sample

    221124-vvwn8shb86

  • MD5

    4609172d3aeb3dd270cc9afbeff2940c

  • SHA1

    cbb8e106862623cedb664b0d7ed7b44b283563cd

  • SHA256

    73c19a778500c6fb04f60d60527ea76a870590ed9e0f6014cb03419d02ff0457

  • SHA512

    38ec29e51f27201b3c8371b4d9c1fd5fc6a7d1ea78353aea2acfb8d3caea6e9f4a9267dc110ea453802f90aceb9b1fb7e4d65e963fee28b9b72248716d0479f7

  • SSDEEP

    49152:JQpffMUqlGuZfvmnf6bkLx/BCJJcNZE+b2MufaHEUBrgee:JQpfMbGuVmnfD6rcVat8q

Malware Config

Targets

    • Target

      NTTsecurity.apk

    • Size

      1MB

    • MD5

      4609172d3aeb3dd270cc9afbeff2940c

    • SHA1

      cbb8e106862623cedb664b0d7ed7b44b283563cd

    • SHA256

      73c19a778500c6fb04f60d60527ea76a870590ed9e0f6014cb03419d02ff0457

    • SHA512

      38ec29e51f27201b3c8371b4d9c1fd5fc6a7d1ea78353aea2acfb8d3caea6e9f4a9267dc110ea453802f90aceb9b1fb7e4d65e963fee28b9b72248716d0479f7

    • SSDEEP

      49152:JQpffMUqlGuZfvmnf6bkLx/BCJJcNZE+b2MufaHEUBrgee:JQpfMbGuVmnfD6rcVat8q

    Score
    5/10
    • Removes a system notification.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Matrix

Collection

    Command and Control

      Credential Access

        Defense Evasion

          Discovery

            Execution

              Exfiltration

                Impact

                  Initial Access

                    Lateral Movement

                      Persistence

                        Privilege Escalation

                          Tasks