General

  • Target

    15e5439975308e17ec56ceeb2726dd5c17debde4433c094fabae29fd1660b12d.bin

  • Size

    3.0MB

  • Sample

    240423-1x1nvscd38

  • MD5

    225785cd6b4dee46d8921b68e6947394

  • SHA1

    303b37e927ac2973a1a247d60c65abd43a779e65

  • SHA256

    15e5439975308e17ec56ceeb2726dd5c17debde4433c094fabae29fd1660b12d

  • SHA512

    f5a129beffdf2131a5a1875b1497876e27bacde480137f7700c1eda98687ad335a55a357d58e6a510fd9be1150df8f8dcbbac8b3465e464d60138de20f573e9c

  • SSDEEP

    12288:xTPNwNPNwNPNwNPNwNPNwNPNwNPNwNPNwNPNwNPNwNPNwNPNwNPNwNPNwNPNwNPJ:Kr

Malware Config

Targets

    • Target

      15e5439975308e17ec56ceeb2726dd5c17debde4433c094fabae29fd1660b12d.bin

    • Size

      3.0MB

    • MD5

      225785cd6b4dee46d8921b68e6947394

    • SHA1

      303b37e927ac2973a1a247d60c65abd43a779e65

    • SHA256

      15e5439975308e17ec56ceeb2726dd5c17debde4433c094fabae29fd1660b12d

    • SHA512

      f5a129beffdf2131a5a1875b1497876e27bacde480137f7700c1eda98687ad335a55a357d58e6a510fd9be1150df8f8dcbbac8b3465e464d60138de20f573e9c

    • SSDEEP

      12288:xTPNwNPNwNPNwNPNwNPNwNPNwNPNwNPNwNPNwNPNwNPNwNPNwNPNwNPNwNPNwNPJ:Kr

    • Removes its main activity from the application launcher

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries the mobile country code (MCC)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Tries to add a device administrator.

    • Acquires the wake lock

MITRE ATT&CK Matrix

Tasks