General

  • Target

    BaSalam.apk

  • Size

    14.7MB

  • Sample

    240522-n2matafb34

  • MD5

    a973b538df92c14d3573be32454b1639

  • SHA1

    f3b7e2e07510d5b889d617dbbf78714a92fac0a1

  • SHA256

    e29fa10b148be279c203e1f9079e7245b834f7912534c1bf4180af37686f621e

  • SHA512

    bb3a1ed95f5c9d03b3bcd511537da816e35ca1f4c867f87bb055bf4f7ca5ca392f5a446ab1ae21699488d50040bffd9ac3c333a625dd96f7ba0fd1411224fe4c

  • SSDEEP

    393216:Le7WIw0L7MzJ3lfSPvS5xrOQi7JAgECYt5TI1mNRI36It:Leu0/Mz1laXWrOQiMC25E1mrwxt

Malware Config

Targets

    • Target

      BaSalam.apk

    • Size

      14.7MB

    • MD5

      a973b538df92c14d3573be32454b1639

    • SHA1

      f3b7e2e07510d5b889d617dbbf78714a92fac0a1

    • SHA256

      e29fa10b148be279c203e1f9079e7245b834f7912534c1bf4180af37686f621e

    • SHA512

      bb3a1ed95f5c9d03b3bcd511537da816e35ca1f4c867f87bb055bf4f7ca5ca392f5a446ab1ae21699488d50040bffd9ac3c333a625dd96f7ba0fd1411224fe4c

    • SSDEEP

      393216:Le7WIw0L7MzJ3lfSPvS5xrOQi7JAgECYt5TI1mNRI36It:Leu0/Mz1laXWrOQiMC25E1mrwxt

    • Checks if the Android device is rooted.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Acquires the wake lock

    • Checks if the internet connection is available

    • Reads information about phone network operator.

    • Schedules tasks to execute at a specified time

      Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    • Checks the presence of a debugger

MITRE ATT&CK Mobile v15

Tasks