General
- Target dbf98b9b54fdd429ceb18b35158e44d4.zip
- Size 1.4MB
- Sample240502-a4msgaeb29
- SHA256 d5ca7ba75cfb8fd76929c1b8f6547780d8305a6654b6423124d380ff59b0d1c9
- MD5 dbf98b9b54fdd429ceb18b35158e44d4
- SHA1 ae15f0e4c2c299adf52de17b51400fcf25479184
- SHA512 b8e7838627cd0346480aa456be863ecc6c56ce4b43fd408be9e104c1183b3d6c3b6fdc5f329e9f4e4421fec3599232e887803ba01959fe56c6a8b30da4fa1079
- SSDEEP 24576:My/WPvDL4292BzHVFYixHq9bYHfumO9dRuKKiwBUH27m8AdWeUR1uffgpABG/4zb:F/W3f4292Bz1FYsHq9bYHfumscKKipw6
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
dbf98b9b54fdd429ceb18b35158e44d4.apk
Resource
android-x86-arm-20240221-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
dbf98b9b54fdd429ceb18b35158e44d4.apk
Resource
android-x64-20240221-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target dbf98b9b54fdd429ceb18b35158e44d4.zip
- Size 1.4MB
- SHA256 d5ca7ba75cfb8fd76929c1b8f6547780d8305a6654b6423124d380ff59b0d1c9
- MD5 dbf98b9b54fdd429ceb18b35158e44d4
- SHA1 ae15f0e4c2c299adf52de17b51400fcf25479184
- SHA512 b8e7838627cd0346480aa456be863ecc6c56ce4b43fd408be9e104c1183b3d6c3b6fdc5f329e9f4e4421fec3599232e887803ba01959fe56c6a8b30da4fa1079
- SSDEEP 24576:My/WPvDL4292BzHVFYixHq9bYHfumO9dRuKKiwBUH27m8AdWeUR1uffgpABG/4zb:F/W3f4292Bz1FYsHq9bYHfumscKKipw6
- MD5 SHA1 SHA512 SSDEEP
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Requests enabling of the accessibility settings.
-
Acquires the wake lock
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Download New Code at Runtime
1Foreground Persistence
1Input Injection
1