General

  • Target

    hmdm-5.12-os.apk

  • Size

    4.2MB

  • Sample

    240524-qfz1wsfa61

  • MD5

    87aff3d15deb3265483726a878b3c823

  • SHA1

    0e28f18337a5c8afdd7cbfad2f0931434a36cb27

  • SHA256

    0d5df53caf0c5d1511058fbd820a44162f0f40782319e14d85c0863a6f67dd13

  • SHA512

    477e20d6500c94079300ece119b38fdb82ceb2aa4c1e04aae2faf6c79359d59b02431d11f1bc73f4ee69ede4a0c48e2c05a387a35a39670b807700ad2a166780

  • SSDEEP

    98304:qlkXtMkrfCgEtl+j/3RtE3/ZE8DXZwR7Pe5Rrww3:D9Mc6gh3RtUXS7Pw3

Malware Config

Targets

    • Target

      hmdm-5.12-os.apk

    • Size

      4.2MB

    • MD5

      87aff3d15deb3265483726a878b3c823

    • SHA1

      0e28f18337a5c8afdd7cbfad2f0931434a36cb27

    • SHA256

      0d5df53caf0c5d1511058fbd820a44162f0f40782319e14d85c0863a6f67dd13

    • SHA512

      477e20d6500c94079300ece119b38fdb82ceb2aa4c1e04aae2faf6c79359d59b02431d11f1bc73f4ee69ede4a0c48e2c05a387a35a39670b807700ad2a166780

    • SSDEEP

      98304:qlkXtMkrfCgEtl+j/3RtE3/ZE8DXZwR7Pe5Rrww3:D9Mc6gh3RtUXS7Pw3

    • Checks if the Android device is rooted.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Checks the application is allowed to request package installs through the package installer

      Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Schedules tasks to execute at a specified time

      Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    • Checks the presence of a debugger

MITRE ATT&CK Mobile v15

Tasks