94be86d50af2ded5b2754cc2f0eeb8d26c44878b6835cb6292abf35df92bd4fa

Resubmissions

28-09-2024 21:15

240928-z4awcazbpf 10

24-03-2024 05:08

240324-fshx2acf2v 7

24-03-2024 02:46

240324-c9m2jabd5s 7

Sharing

Copy URL

Twitter E-mail

General

Target

BlackMart.apk
Size

8.5MB
Sample

240324-c9m2jabd5s
MD5

1f51442ac69949a896f13e42c4d7254a
SHA1

dac18bf7ac2dae640c064fe2563e4e32011144b4
SHA256

94be86d50af2ded5b2754cc2f0eeb8d26c44878b6835cb6292abf35df92bd4fa
SHA512

aaaaecb86f62c6602876a728101dc1604b57b887d788cf3dde66573a101be96301b80be3cbea21eaec9bf3021b335c0bb8964c73e7e5fc95d06cc4d382bec089
SSDEEP

196608:nxgE8qnpvtBIH7qu3G7roKx2NIXfT2+dMwW+dMwI+dMwE+dMww+dMws:nxOeHIH7R3G7rp4k2qMwWqMwIqMwEqMj

Score

7^/10

Malware Config

Targets

- Target
  
  BlackMart.apk
- Size
  
  8.5MB
- MD5
  
  1f51442ac69949a896f13e42c4d7254a
- SHA1
  
  dac18bf7ac2dae640c064fe2563e4e32011144b4
- SHA256
  
  94be86d50af2ded5b2754cc2f0eeb8d26c44878b6835cb6292abf35df92bd4fa
- SHA512
  
  aaaaecb86f62c6602876a728101dc1604b57b887d788cf3dde66573a101be96301b80be3cbea21eaec9bf3021b335c0bb8964c73e7e5fc95d06cc4d382bec089
- SSDEEP
  
  196608:nxgE8qnpvtBIH7qu3G7roKx2NIXfT2+dMwW+dMwI+dMwE+dMww+dMws:nxOeHIH7R3G7rp4k2qMwWqMwIqMwEqMj
Score

7^/10

discovery evasion persistence ransomware
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  evasion persistence
- Legitimate hosting services abused for malware hosting/C2
- Reads information about phone network operator.
  discovery
- Changes the wallpaper (common with ransomware activity).
  ransomware
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Foreground Persistence

T1541

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Makes use of the framework's foreground persistence service

Legitimate hosting services abused for malware hosting/C2

Reads information about phone network operator.

Changes the wallpaper (common with ransomware activity).

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Tasks

static1

behavioral1

behavioral2

behavioral3