General

  • Target

    File.apk

  • Size

    9.3MB

  • Sample

    240420-rw14kabc7v

  • MD5

    afadc4cca958f423b1ed3262b1ef906a

  • SHA1

    c492b625c75afc15a47669657c0a10d27751b1df

  • SHA256

    6cd67050130d442af177e17a5677ea80a1ad674293ad0942102cf276e2f0a074

  • SHA512

    de45096328c6d6946d42408d9f0aefd79d4cfd86cbc249ec4504891b61971415c37a215a7a6ab54c3b7eb1948934ac7cf858f4c0d6f064fb9847d3791a5bb9dc

  • SSDEEP

    98304:yCSv9fPrAJMYoRV5Db/mHmxn8w1ihn2mzbzBnTB0t8cbWC:Y1nMCYw/OH68w1KBzdeiC

Malware Config

Targets

    • Target

      File.apk

    • Size

      9.3MB

    • MD5

      afadc4cca958f423b1ed3262b1ef906a

    • SHA1

      c492b625c75afc15a47669657c0a10d27751b1df

    • SHA256

      6cd67050130d442af177e17a5677ea80a1ad674293ad0942102cf276e2f0a074

    • SHA512

      de45096328c6d6946d42408d9f0aefd79d4cfd86cbc249ec4504891b61971415c37a215a7a6ab54c3b7eb1948934ac7cf858f4c0d6f064fb9847d3791a5bb9dc

    • SSDEEP

      98304:yCSv9fPrAJMYoRV5Db/mHmxn8w1ihn2mzbzBnTB0t8cbWC:Y1nMCYw/OH68w1KBzdeiC

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Requests enabling of the accessibility settings.

    • Acquires the wake lock

MITRE ATT&CK Matrix

Tasks