General

  • Target
    fd99acc504649e8e42687481abbceb71c730f0ab032357d4dc1e95a6ef8bb7ca
  • Size 342KB
  • Sample240410-shbgesfd8y
  • SHA256 fd99acc504649e8e42687481abbceb71c730f0ab032357d4dc1e95a6ef8bb7ca
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • mobileorder

C2
  • blackbeekey.com

  • k7k7.co

Attributes
  • user_agent

    Mozilla/4.0 (compatible; MSIE 5.0; Windows NT; DigExt)

Targets

    • Target
      fd99acc504649e8e42687481abbceb71c730f0ab032357d4dc1e95a6ef8bb7ca
    • Size 342KB
    • SHA256 fd99acc504649e8e42687481abbceb71c730f0ab032357d4dc1e95a6ef8bb7ca
    • MD5 SHA1 SHA512 SSDEEP
    • Removes its main activity from the application launcher

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Queries account information for other applications stored on the device.

      Application may abuse the framework's APIs to collect account information stored on the device.

    • Queries the phone number (MSISDN for GSM devices)

    • Reads the contacts stored on the device.

    • Reads the content of the browser bookmarks.

    • Reads the content of the call log.

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks