General

  • Target

    b2livecam.apk

  • Size

    3.9MB

  • Sample

    240524-pwh7mscg89

  • MD5

    c9f96cf69638d9644e2a31ca656ac8f4

  • SHA1

    afae9b0c961119acf66d977c0d22814b58f32451

  • SHA256

    f69b553926e56ee3790db11d05464c31e9ad14e561842590f7ba2e155999ba19

  • SHA512

    8c53b239230cc2ef98082a6e0cc6723b10f6195e0e1e96e8bd934ca5b3357d6c2425c91e7fc8faa03f10f3b23380a71130206dd9c36506e374c64fd316fec851

  • SSDEEP

    98304:wrL0Vvg9pn6hnEG4hx7+FNFbEbW4u5UXLbZ+Or2p+:wr36hEG4+jFoC4uGLN+gL

Malware Config

Targets

    • Target

      b2livecam.apk

    • Size

      3.9MB

    • MD5

      c9f96cf69638d9644e2a31ca656ac8f4

    • SHA1

      afae9b0c961119acf66d977c0d22814b58f32451

    • SHA256

      f69b553926e56ee3790db11d05464c31e9ad14e561842590f7ba2e155999ba19

    • SHA512

      8c53b239230cc2ef98082a6e0cc6723b10f6195e0e1e96e8bd934ca5b3357d6c2425c91e7fc8faa03f10f3b23380a71130206dd9c36506e374c64fd316fec851

    • SSDEEP

      98304:wrL0Vvg9pn6hnEG4hx7+FNFbEbW4u5UXLbZ+Or2p+:wr36hEG4+jFoC4uGLN+gL

    • Checks if the Android device is rooted.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries the mobile country code (MCC)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Acquires the wake lock

    • Checks if the internet connection is available

    • Reads information about phone network operator.

    • Checks the presence of a debugger

MITRE ATT&CK Matrix

Tasks