General

  • Target

    Download2.apk

  • Size

    4.2MB

  • Sample

    240602-zhm9jsed3y

  • MD5

    9d27fd1802f804975df523bdca5e8b11

  • SHA1

    4d3d6ce98fdd491f8c5f4ef63db5bdb86d0a9a3a

  • SHA256

    fb316717892ce1a5236b1d22727e48d959a4e6f6264164e81ee60cd02ceb03c3

  • SHA512

    31937cc4e9d3cf75b75d28e6d3e9ffcbd1156c10891a5e4b35d457eda024919d3556a5f3cf174bc12896adc58305d6fd6eb7e25e95fec85e1a356bb9ca62f1d4

  • SSDEEP

    98304:eC7ckPA2J+YujH/Phl54pBClkRM4cu0LCrdfwW3:/7cUJkHhlSp8l/4cUwK

Malware Config

Targets

    • Target

      Download2.apk

    • Size

      4.2MB

    • MD5

      9d27fd1802f804975df523bdca5e8b11

    • SHA1

      4d3d6ce98fdd491f8c5f4ef63db5bdb86d0a9a3a

    • SHA256

      fb316717892ce1a5236b1d22727e48d959a4e6f6264164e81ee60cd02ceb03c3

    • SHA512

      31937cc4e9d3cf75b75d28e6d3e9ffcbd1156c10891a5e4b35d457eda024919d3556a5f3cf174bc12896adc58305d6fd6eb7e25e95fec85e1a356bb9ca62f1d4

    • SSDEEP

      98304:eC7ckPA2J+YujH/Phl54pBClkRM4cu0LCrdfwW3:/7cUJkHhlSp8l/4cUwK

    • Checks if the Android device is rooted.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Reads information about phone network operator.

    • Schedules tasks to execute at a specified time

      Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    • Checks the presence of a debugger

MITRE ATT&CK Mobile v15

Tasks