General

  • Target
    89f350332be1172fc2d64ac8ecd7fd15a09a2bd6e0ab6a7898a48fb3e5c9eac3
  • Size 56KB
  • Sample240410-pm8qyafe95
  • SHA256 89f350332be1172fc2d64ac8ecd7fd15a09a2bd6e0ab6a7898a48fb3e5c9eac3
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • mobileorder

C2
  • blackbeekey.com

  • http://blog.sina.com.cn/u/5241106671

Attributes
  • user_agent

    Mozilla/4.0 (compatible; MSIE 5.0; Windows NT; DigExt)

Targets

    • Target
      89f350332be1172fc2d64ac8ecd7fd15a09a2bd6e0ab6a7898a48fb3e5c9eac3
    • Size 56KB
    • SHA256 89f350332be1172fc2d64ac8ecd7fd15a09a2bd6e0ab6a7898a48fb3e5c9eac3
    • MD5 SHA1 SHA512 SSDEEP
    • Removes its main activity from the application launcher

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Queries account information for other applications stored on the device.

      Application may abuse the framework's APIs to collect account information stored on the device.

    • Queries the phone number (MSISDN for GSM devices)

    • Reads the contacts stored on the device.

    • Reads the content of photos stored on the user's device.

    • Reads the content of the browser bookmarks.

    • Reads the content of the call log.

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks