General

  • Target

    rsbd.1.7.apk

  • Size

    6.9MB

  • Sample

    240526-p7gsysfd35

  • MD5

    274d646ebe3870bf4644d11febb1808a

  • SHA1

    05257f0f6028283cbe5b698f6e160de3f82720f8

  • SHA256

    0212839b0851fdfd17724d3b6854f1ffa4c23115bf3328ac45b5cb0fda8ce275

  • SHA512

    48575d316ef0feadaaf088db059465121f6548c91c9adc677c2318f448f0111f3dc4fef315a372c4a47b01ec11bbe792961fc029ea78c8c92864a133b0ba63c6

  • SSDEEP

    98304:Ko0D7CJe3sxNJ+kdkMdenwCryh1N2T5NO6yNhoTBm/zKwEcWL0v+PGyrS+jJ5Eiy:KjiJe8xaMSrVTjWoQrpEczv+OyrS+fw

Malware Config

Targets

    • Target

      rsbd.1.7.apk

    • Size

      6.9MB

    • MD5

      274d646ebe3870bf4644d11febb1808a

    • SHA1

      05257f0f6028283cbe5b698f6e160de3f82720f8

    • SHA256

      0212839b0851fdfd17724d3b6854f1ffa4c23115bf3328ac45b5cb0fda8ce275

    • SHA512

      48575d316ef0feadaaf088db059465121f6548c91c9adc677c2318f448f0111f3dc4fef315a372c4a47b01ec11bbe792961fc029ea78c8c92864a133b0ba63c6

    • SSDEEP

      98304:Ko0D7CJe3sxNJ+kdkMdenwCryh1N2T5NO6yNhoTBm/zKwEcWL0v+PGyrS+jJ5Eiy:KjiJe8xaMSrVTjWoQrpEczv+OyrS+fw

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries the mobile country code (MCC)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks the presence of a debugger

MITRE ATT&CK Mobile v15

Tasks