General

  • Target

    44aea53576c3b94b6155850d61e91cf1.zip

  • Size

    9.3MB

  • Sample

    240502-nbzhfsff5x

  • MD5

    44aea53576c3b94b6155850d61e91cf1

  • SHA1

    f0b5c26fd6a7aee2c26a13428c0672644d118cf4

  • SHA256

    bb60355c7714fc835e1b92e25ca479a0f0a6b49cd3e849118b6def8a007d7661

  • SHA512

    ecd3598414f249568693a9e9a90a1feb1e927e1fc4dc0a721facd548cb1283c67b08a934b572f3ec63c9d2fd01daaafdc64ea4008cb622b1e2a5f68a273d9aa9

  • SSDEEP

    98304:maTeQ++DhpABvaQpzC+O0jemzfzBHT00to7IBN:d6ipmaybO0j5zVn9

Malware Config

Targets

    • Target

      44aea53576c3b94b6155850d61e91cf1.zip

    • Size

      9.3MB

    • MD5

      44aea53576c3b94b6155850d61e91cf1

    • SHA1

      f0b5c26fd6a7aee2c26a13428c0672644d118cf4

    • SHA256

      bb60355c7714fc835e1b92e25ca479a0f0a6b49cd3e849118b6def8a007d7661

    • SHA512

      ecd3598414f249568693a9e9a90a1feb1e927e1fc4dc0a721facd548cb1283c67b08a934b572f3ec63c9d2fd01daaafdc64ea4008cb622b1e2a5f68a273d9aa9

    • SSDEEP

      98304:maTeQ++DhpABvaQpzC+O0jemzfzBHT00to7IBN:d6ipmaybO0j5zVn9

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Acquires the wake lock

    • Schedules tasks to execute at a specified time

      Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

MITRE ATT&CK Mobile v15

Tasks