smsworm | 67b7ff6d73d76c2bea04411bed906e903f2c03dce6d2f1c1a960c0c7dd9b3aa1 | Triage

Sharing

General

Target

240315-w9rt9sfh6w_pw_infected.zip
Size

11.6MB
Sample

240315-xa9rgafh91
MD5

e5e9c22795582578707014ccd5702782
SHA1

eb0c45dd0a41ebe698027f35f60d8cc116299e7f
SHA256

67b7ff6d73d76c2bea04411bed906e903f2c03dce6d2f1c1a960c0c7dd9b3aa1
SHA512

4af1331ab64e24fa4eaad64e26060587a644d553fa153c5856852aa34bfd66729910b6cbc67f442dd0e27b617077532f80370a08dd7e30c8250f0d3511dbdb23
SSDEEP

196608:kPIHQLfg03JidqqjiGtLKMAWCvyJQwRwJdIwbIBTX9rwYqLWG/NutwBXfIFZFok:kPTLfj3Ydjj5KMgv1wRwJrojCBsZZWk

Score

10^/10

smsworm android evasion

Malware Config

Targets

- Target
  
  rata.tvcreator_v1.1.apk
- Size
  
  13.4MB
- MD5
  
  aa725d2639cc248c60b018159dd753ff
- SHA1
  
  f46ea732a40b3de67283e8e43b24bb7e71e86380
- SHA256
  
  4deaf9b563854ae9a724ae46ec714566064fe5fd607e2880d742b240b9952f79
- SHA512
  
  6421936323db77cb50a51ffa79e3d45503fae1cb523c709f7ac155359ec8bf26dfc4dddf1f20c875689c95784b6a37c83688d03527b810d15a73ba877fa681aa
- SSDEEP
  
  393216:mT3XVpmsqRSeYhRux8uIFdzDYFk4rVnbbE5:mDXfmsVh46dMk4rVXm
Score

7^/10

evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Acquires the wake lock
behavioral1 behavioral2

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2