General

  • Target

    airadb.apk

  • Size

    1.7MB

  • Sample

    240522-n76lmsgc8x

  • MD5

    abd61f25e1d5060c572c2da89d740956

  • SHA1

    c75153b2c0f4bc02fa511682fc499b8173209ae0

  • SHA256

    5617202442bbe35191b23e17e545c83a133b45cb186e80622088f460158828ef

  • SHA512

    df051b3f322387c5ec2879bbf7a428d583db2375b67ffd2d8e001ed240a6fc8aa18400544b52f506886b1ca083b9d708922f46f7c51b24f75ce604b22ceb553e

  • SSDEEP

    24576:qavQdkTZN/KWqXEcWdreJU9MISoIGVwaRMidByPp6oFFeRr8Dbf9:vv2kvSWgWAUCI/I05RLdByPAAcRr8t

Malware Config

Targets

    • Target

      airadb.apk

    • Size

      1.7MB

    • MD5

      abd61f25e1d5060c572c2da89d740956

    • SHA1

      c75153b2c0f4bc02fa511682fc499b8173209ae0

    • SHA256

      5617202442bbe35191b23e17e545c83a133b45cb186e80622088f460158828ef

    • SHA512

      df051b3f322387c5ec2879bbf7a428d583db2375b67ffd2d8e001ed240a6fc8aa18400544b52f506886b1ca083b9d708922f46f7c51b24f75ce604b22ceb553e

    • SSDEEP

      24576:qavQdkTZN/KWqXEcWdreJU9MISoIGVwaRMidByPp6oFFeRr8Dbf9:vv2kvSWgWAUCI/I05RLdByPAAcRr8t

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

MITRE ATT&CK Mobile v15

Tasks