General

  • Target

    31665c9552645e53626c59964f206747dec5e96ed1449ee25e33fac66f491430.bin

  • Size

    3.8MB

  • Sample

    240521-1w2jrsbg45

  • MD5

    57ce99377c52e713d52a7f8baba72817

  • SHA1

    6bfbf18a965d2171e879a7d76de71e9d60f86d76

  • SHA256

    31665c9552645e53626c59964f206747dec5e96ed1449ee25e33fac66f491430

  • SHA512

    ab47284df986baf1b897f3c39f48411aa037209cc50fe93d2b75655ca6a5ab1b269ee7519bf9af7b037647ebbf7cdc63f1ec0f244b460f33e2e0444000c2050c

  • SSDEEP

    98304:wBhNlh1a4GoaMb5LLNUeM67qg/OpZlVw9wBtn+nc6eEBMI3WatyW:+Nlh1T3b5VjKy2t4te2Jd

Malware Config

Targets

    • Target

      31665c9552645e53626c59964f206747dec5e96ed1449ee25e33fac66f491430.bin

    • Size

      3.8MB

    • MD5

      57ce99377c52e713d52a7f8baba72817

    • SHA1

      6bfbf18a965d2171e879a7d76de71e9d60f86d76

    • SHA256

      31665c9552645e53626c59964f206747dec5e96ed1449ee25e33fac66f491430

    • SHA512

      ab47284df986baf1b897f3c39f48411aa037209cc50fe93d2b75655ca6a5ab1b269ee7519bf9af7b037647ebbf7cdc63f1ec0f244b460f33e2e0444000c2050c

    • SSDEEP

      98304:wBhNlh1a4GoaMb5LLNUeM67qg/OpZlVw9wBtn+nc6eEBMI3WatyW:+Nlh1T3b5VjKy2t4te2Jd

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries the mobile country code (MCC)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks the presence of a debugger

MITRE ATT&CK Mobile v15

Tasks