General

  • Target

    MiniFoxVpn-v0.7.2.1 Modded.apk

  • Size

    7.8MB

  • Sample

    230418-q2bv7abg38

  • MD5

    d5ba74462fc671be4fd5938defe0dedf

  • SHA1

    c400cc47b369fdb078ede930120e9e37cb2c533e

  • SHA256

    d082dde8b7196620cef8b5f0f211ad2c2b9f1325442fba2d3db2c40b655a36d3

  • SHA512

    26ee70d2cc21c1338eea5bee90ec37c504fe6f75346239c670f94bd3b60d185f3d6ef3390effa39c0ee3c708266e7580bb66d21ff8dffc4635561d654a615cc8

  • SSDEEP

    196608:qLSuOPUqncFcz3rW7Dkcae8lJjoiCKLPcCSqmkN+w:qLTOMaz3yEcOUfKzykAw

Malware Config

Targets

    • Target

      MiniFoxVpn-v0.7.2.1 Modded.apk

    • Size

      7.8MB

    • MD5

      d5ba74462fc671be4fd5938defe0dedf

    • SHA1

      c400cc47b369fdb078ede930120e9e37cb2c533e

    • SHA256

      d082dde8b7196620cef8b5f0f211ad2c2b9f1325442fba2d3db2c40b655a36d3

    • SHA512

      26ee70d2cc21c1338eea5bee90ec37c504fe6f75346239c670f94bd3b60d185f3d6ef3390effa39c0ee3c708266e7580bb66d21ff8dffc4635561d654a615cc8

    • SSDEEP

      196608:qLSuOPUqncFcz3rW7Dkcae8lJjoiCKLPcCSqmkN+w:qLTOMaz3yEcOUfKzykAw

    Score
    7/10
    • Acquires the wake lock.

    • Legitimate hosting services abused for malware hosting/C2

    • Reads information about phone network operator.

    • Removes a system notification.

    • Uses Crypto APIs (Might try to encrypt user data).

MITRE ATT&CK Enterprise v6

Tasks