General

  • Target

    8ef40f13c6192bd8defa7ac0b54ce2454e71b55867bdafc51ecb714d02abfd1a

  • Size

    2.0MB

  • Sample

    240410-pvjrsafh36

  • MD5

    0ea22a4baee75c86f9895e39cbc04572

  • SHA1

    cf610aae906ffcfd52c08d6ba03d9ce2c9996ac8

  • SHA256

    8ef40f13c6192bd8defa7ac0b54ce2454e71b55867bdafc51ecb714d02abfd1a

  • SHA512

    228481850ab1532989774e0e738041359bf81c5867f7d3bacf9eb32c36784eb330d23fa52bbdda58ef6b657e34686d95675f602229f6088f6a17ef374061996f

  • SSDEEP

    49152:4Fkzdw14Nb12ssSjs502qFL6a2D4j9+dwGxFqyMrxdRhVzdJ+:lw1yB2V509V6fkj9CtbLMrxzzd0

Malware Config

Targets

    • Target

      8ef40f13c6192bd8defa7ac0b54ce2454e71b55867bdafc51ecb714d02abfd1a

    • Size

      2.0MB

    • MD5

      0ea22a4baee75c86f9895e39cbc04572

    • SHA1

      cf610aae906ffcfd52c08d6ba03d9ce2c9996ac8

    • SHA256

      8ef40f13c6192bd8defa7ac0b54ce2454e71b55867bdafc51ecb714d02abfd1a

    • SHA512

      228481850ab1532989774e0e738041359bf81c5867f7d3bacf9eb32c36784eb330d23fa52bbdda58ef6b657e34686d95675f602229f6088f6a17ef374061996f

    • SSDEEP

      49152:4Fkzdw14Nb12ssSjs502qFL6a2D4j9+dwGxFqyMrxdRhVzdJ+:lw1yB2V509V6fkj9CtbLMrxzzd0

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Removes its main activity from the application launcher

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about running processes on the device.

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Acquires the wake lock

    • Reads information about phone network operator.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Mobile v15

Tasks