General

  • Target

    Ahmyth-aligned-debugSigned.apk

  • Size

    293KB

  • Sample

    240331-s76zmaeg87

  • MD5

    97a4df8c6894f3888d1b91c3a6eaa2e5

  • SHA1

    73e1666f15cd7b5061d24a8771d33870d50ecdf4

  • SHA256

    6fbeb9fdce5e26e3d2d7d35103608c3e84fb7411157895c2279040aff9fb6ee7

  • SHA512

    ffa46e684c69e43340c22e904e4218bd01b5f0899147fda541650d05d7f6d7c1c36a81e4de1337b9964d245b9ec6f1bca7be9067121c892b58084677f90ff695

  • SSDEEP

    6144:N8iuy0OqjMfC6J1qbDqDNv6wEJ3XLBD7PVbPfX5s:N2OqjqSyDN3wVDL5X5s

Malware Config

Extracted

Family

ahmyth

C2

http://Vallithebest-32755.portmap.host:32755

Targets

    • Target

      Ahmyth-aligned-debugSigned.apk

    • Size

      293KB

    • MD5

      97a4df8c6894f3888d1b91c3a6eaa2e5

    • SHA1

      73e1666f15cd7b5061d24a8771d33870d50ecdf4

    • SHA256

      6fbeb9fdce5e26e3d2d7d35103608c3e84fb7411157895c2279040aff9fb6ee7

    • SHA512

      ffa46e684c69e43340c22e904e4218bd01b5f0899147fda541650d05d7f6d7c1c36a81e4de1337b9964d245b9ec6f1bca7be9067121c892b58084677f90ff695

    • SSDEEP

      6144:N8iuy0OqjMfC6J1qbDqDNv6wEJ3XLBD7PVbPfX5s:N2OqjqSyDN3wVDL5X5s

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Tries to add a device administrator.

MITRE ATT&CK Mobile v15

Tasks