General

  • Target

    1st Mall v10.3.apk-2.apk

  • Size

    21.8MB

  • Sample

    230609-tjq4yace87

  • MD5

    7eb4c194dd81c276c94a62f6aa812a95

  • SHA1

    19a27aa4632666f039d7016b34d2a41d2a10654c

  • SHA256

    dbf0f2b43cb88ad94e9039aa83c10204893f31dbb14b2e41e9fde5167efb1624

  • SHA512

    7fc309a59fdaae6db5f00c75e04069bd760c956ebdc0488e1f2724bbac9113c968382bfbd9fcafb5dc1f203f7a875c8bd040cc9e4e9ba7e92b4459a325575cc9

  • SSDEEP

    49152:s7lVVr1OxeFMjwBJQhwZpHRFqPQpecTvI6ufLWsfkUR:sJVOxeGj4QhG5RFmQp/TvXWaPUR

Malware Config

Targets

    • Target

      1st Mall v10.3.apk-2.apk

    • Size

      21.8MB

    • MD5

      7eb4c194dd81c276c94a62f6aa812a95

    • SHA1

      19a27aa4632666f039d7016b34d2a41d2a10654c

    • SHA256

      dbf0f2b43cb88ad94e9039aa83c10204893f31dbb14b2e41e9fde5167efb1624

    • SHA512

      7fc309a59fdaae6db5f00c75e04069bd760c956ebdc0488e1f2724bbac9113c968382bfbd9fcafb5dc1f203f7a875c8bd040cc9e4e9ba7e92b4459a325575cc9

    • SSDEEP

      49152:s7lVVr1OxeFMjwBJQhwZpHRFqPQpecTvI6ufLWsfkUR:sJVOxeGj4QhG5RFmQp/TvXWaPUR

    Score
    8/10
    • Makes use of the framework's Accessibility service.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

    • Removes a system notification.

MITRE ATT&CK Matrix

Tasks