Resubmissions

22-05-2024 07:38

240522-jgg35sge7t 7

22-05-2024 06:53

240522-hn1cmafe55 7

General

  • Target

    Update Aadhar.Apk

  • Size

    4.9MB

  • Sample

    240522-jgg35sge7t

  • MD5

    341b442187e775c210f51daf8da2ca49

  • SHA1

    ae049184d4fe9b95fae57ba1748f0dd5899eaea8

  • SHA256

    ec2f59973066508a4e5d6b962e86e847b1686205e9ee1585b150f3d210fc97df

  • SHA512

    b5b683087838c6b7dee696900310c8fd9417d7ed201f88a4c1984fa5f8287994422c4abd10768f68f665173fb9459b3b5dfd105e4b3a72a036225ae1910c8b44

  • SSDEEP

    98304:jkWT4ssus2bgXHP3pMAcLD0JZvlmMLKBkjuBj1ol7ESY17D:jJTjbeRMncZ2xBOEf

Malware Config

Targets

    • Target

      Update Aadhar.Apk

    • Size

      4.9MB

    • MD5

      341b442187e775c210f51daf8da2ca49

    • SHA1

      ae049184d4fe9b95fae57ba1748f0dd5899eaea8

    • SHA256

      ec2f59973066508a4e5d6b962e86e847b1686205e9ee1585b150f3d210fc97df

    • SHA512

      b5b683087838c6b7dee696900310c8fd9417d7ed201f88a4c1984fa5f8287994422c4abd10768f68f665173fb9459b3b5dfd105e4b3a72a036225ae1910c8b44

    • SSDEEP

      98304:jkWT4ssus2bgXHP3pMAcLD0JZvlmMLKBkjuBj1ol7ESY17D:jJTjbeRMncZ2xBOEf

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries the mobile country code (MCC)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

MITRE ATT&CK Matrix

Tasks