Overview

overview

10

Static

static

6

19111901a0...bf.apk

android-9-x86

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    19111901a08cfe3c4e1f683e3174dabf

  • Size

    5.2MB

  • Sample

    231225-m3msashhaq

  • MD5

    19111901a08cfe3c4e1f683e3174dabf

  • SHA1

    2df8346e1fa3e52775e3cd19af1b90b8df0f1e43

  • SHA256

    a208c2a9d7366152975ad6214670e8dfed33fc0ed2058485c93f520a55a95ef7

  • SHA512

    e5d290d219e82bb398293ff8a71baa19963333bae85ac247dffa3f6ae94e74a7e30c8d7c1f40a128a72e6387afdcfd7491b62224d66899c86a88d33329981365

  • SSDEEP

    98304:oqk+3oeAZKfskumjSbhUWCyK3c00wXLvQSpH6LK1RxJKct2uohct5AYHyT:oqk0N6KfskumjSbu7T0wboGrKcRoh054

Score
10/10
badmirrorandroidinfostealerrattrojan

Malware Config

Targets

    • Target

      19111901a08cfe3c4e1f683e3174dabf

    • Size

      5.2MB

    • MD5

      19111901a08cfe3c4e1f683e3174dabf

    • SHA1

      2df8346e1fa3e52775e3cd19af1b90b8df0f1e43

    • SHA256

      a208c2a9d7366152975ad6214670e8dfed33fc0ed2058485c93f520a55a95ef7

    • SHA512

      e5d290d219e82bb398293ff8a71baa19963333bae85ac247dffa3f6ae94e74a7e30c8d7c1f40a128a72e6387afdcfd7491b62224d66899c86a88d33329981365

    • SSDEEP

      98304:oqk+3oeAZKfskumjSbhUWCyK3c00wXLvQSpH6LK1RxJKct2uohct5AYHyT:oqk0N6KfskumjSbu7T0wboGrKcRoh054

    Score
    10/10
    badmirrorinfostealerrattrojan

    • BadMirror

      BadMirror is an Android infostealer first seen in March 2016.

      trojaninfostealerratbadmirror

    • BadMirror payload

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Reads the content of SMS inbox messages.

      infostealer

    • Reads information about phone network operator.

    behavioral1

MITRE ATT&CK Matrix

Tasks