General

  • Target
    QHFELN.apk
  • Size 2.0MB
  • Sample240508-rr4c5abb48
  • SHA256 8f323a9be85e9f1d8a8889e97d66bb683059e76c2bb3b5cbb25dd891c43b986e
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      QHFELN.apk
    • Size 2.0MB
    • SHA256 8f323a9be85e9f1d8a8889e97d66bb683059e76c2bb3b5cbb25dd891c43b986e
    • MD5 SHA1 SHA512 SSDEEP
    • Removes its main activity from the application launcher

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Tries to add a device administrator.

    • Acquires the wake lock

    • Checks if the internet connection is available

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Mobile v15

Tasks