General
- Target 92f211adb0da4cd916dd9f7e74582abe2fdf4d35fc590c99db297114949c5643
- Size 13.3MB
- Sample240510-2h7pasdf7w
- SHA256 92f211adb0da4cd916dd9f7e74582abe2fdf4d35fc590c99db297114949c5643
- MD5 ad8685363a026eb8a22c8eb507d1cf08
- SHA1 1e1ac8dc688841052c589e533c4f39d334f9f858
- SHA512 5d4fb4e8ebfba021fc4cb32c3f2d42c0fcfcde7843dd588b3a3fc3658f641034e27c71deec49fa0e5cc7aac0bad94cffc754b47d81599859c02c922bd66b1e43
- SSDEEP 196608:Of7U2ybMql+wzQ3CFO0BEetR2kpXPhJ5jWuhM6GrOiJbZhmqH4DxhIlltNgB6CXP:Q7Xyb5zj/ppJRWuhpMvbZEqHdtI6CXKA
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
92f211adb0da4cd916dd9f7e74582abe2fdf4d35fc590c99db297114949c5643.apk
Resource
android-x86-arm-20240506-en
Behavioral task
behavioral2
Sample
92f211adb0da4cd916dd9f7e74582abe2fdf4d35fc590c99db297114949c5643.apk
Resource
android-x64-20240506-en
Malware Config
Targets
-
- Target 92f211adb0da4cd916dd9f7e74582abe2fdf4d35fc590c99db297114949c5643
- Size 13.3MB
- SHA256 92f211adb0da4cd916dd9f7e74582abe2fdf4d35fc590c99db297114949c5643
- MD5 ad8685363a026eb8a22c8eb507d1cf08
- SHA1 1e1ac8dc688841052c589e533c4f39d334f9f858
- SHA512 5d4fb4e8ebfba021fc4cb32c3f2d42c0fcfcde7843dd588b3a3fc3658f641034e27c71deec49fa0e5cc7aac0bad94cffc754b47d81599859c02c922bd66b1e43
- SSDEEP 196608:Of7U2ybMql+wzQ3CFO0BEetR2kpXPhJ5jWuhM6GrOiJbZhmqH4DxhIlltNgB6CXP:Q7Xyb5zj/ppJRWuhpMvbZEqHdtI6CXKA
- MD5 SHA1 SHA512 SSDEEP
-
Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries the mobile country code (MCC)
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Acquires the wake lock
-
Checks if the internet connection is available
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Foreground Persistence
1Virtualization/Sandbox Evasion
3System Checks
3