General

  • Target

    xmshop.apk

  • Size

    1.2MB

  • Sample

    240522-pash7agh62

  • MD5

    8825c1537a8939f11e316be7a75764fe

  • SHA1

    4a928dd5fbce2b88ab60b07cffac7caa33035873

  • SHA256

    7e44854835f425102f1aa37967b0416caa732bec45936c2e4a14c37bb037cbe3

  • SHA512

    99d1876b5f00c651ca6760057df74c39ea1b76d677141019e4f0acda6a033d65efa8230bf8c57ba55269f64f3a7805fdf68f63cb1c79defb341f2d2f78c5613b

  • SSDEEP

    24576:9QOzUKrm0d8iSNZAYRUX9u7wnnKGn/Zm+zZHkTfmmwJ9T6f:V4KBuF0Yg9uwpz2

Malware Config

Targets

    • Target

      xmshop.apk

    • Size

      1.2MB

    • MD5

      8825c1537a8939f11e316be7a75764fe

    • SHA1

      4a928dd5fbce2b88ab60b07cffac7caa33035873

    • SHA256

      7e44854835f425102f1aa37967b0416caa732bec45936c2e4a14c37bb037cbe3

    • SHA512

      99d1876b5f00c651ca6760057df74c39ea1b76d677141019e4f0acda6a033d65efa8230bf8c57ba55269f64f3a7805fdf68f63cb1c79defb341f2d2f78c5613b

    • SSDEEP

      24576:9QOzUKrm0d8iSNZAYRUX9u7wnnKGn/Zm+zZHkTfmmwJ9T6f:V4KBuF0Yg9uwpz2

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries the mobile country code (MCC)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks the presence of a debugger

MITRE ATT&CK Matrix

Tasks