General

  • Target

    fumanfen.apk

  • Size

    3.2MB

  • Sample

    240523-p1aq3aah56

  • MD5

    d14c332ac049c926e3e7d8a90f854375

  • SHA1

    a62b2a87c8fd19633ef2a2176cc1a6e15d9cdfcc

  • SHA256

    762547f87b20f933c9055fe9220fc67e1ee3fe13e799e40a972094f52aa021d9

  • SHA512

    938d74181fb5230c6005d22f808350e4544dd04853b05b9f40f9abb56e245f9db68418d965976f74748ca6a6ab32e1ef7fd068f8ee4e219d0210aab69b5a4f19

  • SSDEEP

    98304:hZjcXUKw2N5FCZ/wF5OUsDrXzgj8nAbLKWe:hak1rZ/UgUs/XzgUWe

Malware Config

Targets

    • Target

      fumanfen.apk

    • Size

      3.2MB

    • MD5

      d14c332ac049c926e3e7d8a90f854375

    • SHA1

      a62b2a87c8fd19633ef2a2176cc1a6e15d9cdfcc

    • SHA256

      762547f87b20f933c9055fe9220fc67e1ee3fe13e799e40a972094f52aa021d9

    • SHA512

      938d74181fb5230c6005d22f808350e4544dd04853b05b9f40f9abb56e245f9db68418d965976f74748ca6a6ab32e1ef7fd068f8ee4e219d0210aab69b5a4f19

    • SSDEEP

      98304:hZjcXUKw2N5FCZ/wF5OUsDrXzgj8nAbLKWe:hak1rZ/UgUs/XzgUWe

    • Checks if the Android device is rooted.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

MITRE ATT&CK Matrix

Tasks