General

  • Target

    f3f3764ee6a0e5b933e95040092e0b348f672aaab273cf8eaaeabca28be5da36

  • Size

    4.6MB

  • Sample

    230328-nnnaysaf87

  • MD5

    c68112c876ba3a0b60da186da7f4afc8

  • SHA1

    d45bda0756d12827e5190babf75b9f5d90a5e41c

  • SHA256

    f3f3764ee6a0e5b933e95040092e0b348f672aaab273cf8eaaeabca28be5da36

  • SHA512

    a24a23ea5f3a2b1bef6ca1f3de7352b03198f8766f7b3bad6c906a658a282b01a14b497702f716c9195d261a16f96e80c7d984b257c319bad2a29d9da10c240d

  • SSDEEP

    98304:Io1OUBcjrJpw6ND4rf+99Enw3oPzAlXljLVFrCFYuVFRQN0a8eIvIA:Io4+iGVT+RYklVLLIFRM062

Malware Config

Targets

    • Target

      f3f3764ee6a0e5b933e95040092e0b348f672aaab273cf8eaaeabca28be5da36

    • Size

      4.6MB

    • MD5

      c68112c876ba3a0b60da186da7f4afc8

    • SHA1

      d45bda0756d12827e5190babf75b9f5d90a5e41c

    • SHA256

      f3f3764ee6a0e5b933e95040092e0b348f672aaab273cf8eaaeabca28be5da36

    • SHA512

      a24a23ea5f3a2b1bef6ca1f3de7352b03198f8766f7b3bad6c906a658a282b01a14b497702f716c9195d261a16f96e80c7d984b257c319bad2a29d9da10c240d

    • SSDEEP

      98304:Io1OUBcjrJpw6ND4rf+99Enw3oPzAlXljLVFrCFYuVFRQN0a8eIvIA:Io4+iGVT+RYklVLLIFRM062

    Score
    8/10
    • Makes use of the framework's Accessibility service.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks