smsworm | ff43be3e709be29f1902ef98942a93e569a872b87aa8e683394db1c0cc8983b1 | Triage

Sharing

General

Target

ff43be3e709be29f1902ef98942a93e569a872b87aa8e683394db1c0cc8983b1
Size

14.0MB
Sample

240325-p4wgyagb88
MD5

817ec1cd96d40bdebe0e5f8bbddd1be6
SHA1

933c5803653a4d54002e8dbdabbdedbe1acc4b23
SHA256

ff43be3e709be29f1902ef98942a93e569a872b87aa8e683394db1c0cc8983b1
SHA512

0a7204ea9fb92fa074f1383f520cca9cea886d457054c17d4ea9ce1783dcce99146fd44ea3d7cce1dac6c8d4a1721a2fd7477d7d96057f797d1095521b69ff57
SSDEEP

196608:xvjdvQcgc3TOFZ7H27Tnwzi5bjI2NMpeRjO33+DsCusEGoHtdxCr6ZZOEym5f:xLdocqhWnnI2No3SsCrk9CkOc5f

Score

10^/10

smsworm android evasion persistence

Malware Config

Targets

- Target
  
  ff43be3e709be29f1902ef98942a93e569a872b87aa8e683394db1c0cc8983b1
- Size
  
  14.0MB
- MD5
  
  817ec1cd96d40bdebe0e5f8bbddd1be6
- SHA1
  
  933c5803653a4d54002e8dbdabbdedbe1acc4b23
- SHA256
  
  ff43be3e709be29f1902ef98942a93e569a872b87aa8e683394db1c0cc8983b1
- SHA512
  
  0a7204ea9fb92fa074f1383f520cca9cea886d457054c17d4ea9ce1783dcce99146fd44ea3d7cce1dac6c8d4a1721a2fd7477d7d96057f797d1095521b69ff57
- SSDEEP
  
  196608:xvjdvQcgc3TOFZ7H27Tnwzi5bjI2NMpeRjO33+DsCusEGoHtdxCr6ZZOEym5f:xLdocqhWnnI2No3SsCrk9CkOc5f
Score

7^/10

evasion persistence
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  evasion persistence
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Foreground Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Foreground Persistence

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence