General
-
Target
d2b5dd74b5950953028cabf5d62c40366b14a2e803fb091500c6b6826f03f95e.zip
-
Size
1.4MB
-
Sample
240502-clxk3agc79
-
MD5
74c96a71cd95e6fab924deb1ddb0a498
-
SHA1
7420f8e52a6f890531cbe3e3c4adf2c15e9e423b
-
SHA256
d2b5dd74b5950953028cabf5d62c40366b14a2e803fb091500c6b6826f03f95e
-
SHA512
288ffaa98b853942847367a7ec4f48863d14aa4355234be9b45791a69c88e83f3248a725c0243637cb2a8b1dc62f14346a6b807a5218325a35e8598a6f0287be
-
SSDEEP
24576:Bc1LRTK8hDfBWjuWgMJbJ1VVmw63d+KGZtWSF9ymB7R8uQzgpjbM/4zgdS:BKNzhj4jjg87VVmw6NpGZoSF9nxnQzgF
Behavioral task
behavioral1
Sample
d2b5dd74b5950953028cabf5d62c40366b14a2e803fb091500c6b6826f03f95e.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
d2b5dd74b5950953028cabf5d62c40366b14a2e803fb091500c6b6826f03f95e.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
d2b5dd74b5950953028cabf5d62c40366b14a2e803fb091500c6b6826f03f95e.apk
Resource
android-x64-arm64-20240221-en
Malware Config
Targets
-
-
Target
d2b5dd74b5950953028cabf5d62c40366b14a2e803fb091500c6b6826f03f95e.zip
-
Size
1.4MB
-
MD5
74c96a71cd95e6fab924deb1ddb0a498
-
SHA1
7420f8e52a6f890531cbe3e3c4adf2c15e9e423b
-
SHA256
d2b5dd74b5950953028cabf5d62c40366b14a2e803fb091500c6b6826f03f95e
-
SHA512
288ffaa98b853942847367a7ec4f48863d14aa4355234be9b45791a69c88e83f3248a725c0243637cb2a8b1dc62f14346a6b807a5218325a35e8598a6f0287be
-
SSDEEP
24576:Bc1LRTK8hDfBWjuWgMJbJ1VVmw63d+KGZtWSF9ymB7R8uQzgpjbM/4zgdS:BKNzhj4jjg87VVmw6NpGZoSF9nxnQzgF
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Requests enabling of the accessibility settings.
-
Acquires the wake lock
-
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Download New Code at Runtime
1Foreground Persistence
1Hide Artifacts
1Suppress Application Icon
1Input Injection
1