General

  • Target

    9774140849.zip

  • Size

    4.4MB

  • Sample

    230328-l7x86acb2x

  • MD5

    72b485860f28fa65414af841b4295f7c

  • SHA1

    9e0f999cd0e219a89306e637494f04247b4029df

  • SHA256

    b012425386b345f0ed08b2e5cf7c1937414c80352995daef9166ba7fcee92262

  • SHA512

    e4f36c1b377aa059b084b13d120bdcee3c6866648658e45dc212d45215102fb37ac0275c7a2d407736b4b45591d2ee867d2aa96b1ba34f303d6d44aaaa2a8761

  • SSDEEP

    98304:/YjInC1T7nLQ4CNDHGRA/Rr3Dvidg666/Fq7HoxfsS2xn9xx:QzVLQ4ZEVDvUg66MFQoxgx9xx

Malware Config

Targets

    • Target

      f3f3764ee6a0e5b933e95040092e0b348f672aaab273cf8eaaeabca28be5da36

    • Size

      4.6MB

    • MD5

      c68112c876ba3a0b60da186da7f4afc8

    • SHA1

      d45bda0756d12827e5190babf75b9f5d90a5e41c

    • SHA256

      f3f3764ee6a0e5b933e95040092e0b348f672aaab273cf8eaaeabca28be5da36

    • SHA512

      a24a23ea5f3a2b1bef6ca1f3de7352b03198f8766f7b3bad6c906a658a282b01a14b497702f716c9195d261a16f96e80c7d984b257c319bad2a29d9da10c240d

    • SSDEEP

      98304:Io1OUBcjrJpw6ND4rf+99Enw3oPzAlXljLVFrCFYuVFRQN0a8eIvIA:Io4+iGVT+RYklVLLIFRM062

    Score
    8/10
    • Makes use of the framework's Accessibility service.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks