Overview

overview

10

Static

static

10

878bb68727...a5.apk

android-9-x86

8

878bb68727...a5.apk

android-10-x64

8

878bb68727...a5.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    878bb68727daf025c0c9619d1d12337c289489f1190410ca4025c47f39357aa5.bin

  • Size

    4.4MB

  • Sample

    240322-1xbpqsca7y

  • MD5

    6eb2123c58bb283790a43b5fdaef1c25

  • SHA1

    67deca3fe3025a3b384240aa76c8c986818b21ea

  • SHA256

    878bb68727daf025c0c9619d1d12337c289489f1190410ca4025c47f39357aa5

  • SHA512

    d6362dbffb762fba634159a7f390595fcd77574e47a6b338a65b4080a379d3a983fe00c0bf8a7f2f513ba0397538d52c712376246d02385300a70ee6a7f0676a

  • SSDEEP

    98304:Lhinlhin6Vhinahinx1hin6hinshinUhinh3vkBcgOjq6lJC1Em770k:lCzC6DC8CxjCcCyCKChf0OjjGkk

Score
10/10
irataandroidcollectionevasionpersistence

Malware Config

Targets

    • Target

      878bb68727daf025c0c9619d1d12337c289489f1190410ca4025c47f39357aa5.bin

    • Size

      4.4MB

    • MD5

      6eb2123c58bb283790a43b5fdaef1c25

    • SHA1

      67deca3fe3025a3b384240aa76c8c986818b21ea

    • SHA256

      878bb68727daf025c0c9619d1d12337c289489f1190410ca4025c47f39357aa5

    • SHA512

      d6362dbffb762fba634159a7f390595fcd77574e47a6b338a65b4080a379d3a983fe00c0bf8a7f2f513ba0397538d52c712376246d02385300a70ee6a7f0676a

    • SSDEEP

      98304:Lhinlhin6Vhinahinx1hin6hinshinUhinh3vkBcgOjq6lJC1Em770k:lCzC6DC8CxjCcCyCKChf0OjjGkk

    Score
    8/10
    collectionevasionpersistence

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

      collectionevasion

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

      evasionpersistence

    • Acquires the wake lock

    behavioral1behavioral2behavioral3

MITRE ATT&CK Mobile v15

Tasks