General

  • Target
    GolgeTV-PLUS-1.2.7.apk
  • Size 4.3MB
  • Sample240603-shffdabf29
  • SHA256 d45d435a278e9ea1729cac26403f2331cba88bc429b997cd5324e20e4fbaa169
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      GolgeTV-PLUS-1.2.7.apk
    • Size 4.3MB
    • SHA256 d45d435a278e9ea1729cac26403f2331cba88bc429b997cd5324e20e4fbaa169
    • MD5 SHA1 SHA512 SSDEEP
    • Checks if the Android device is rooted.

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries the mobile country code (MCC)

    • Checks if the internet connection is available

    • Legitimate hosting services abused for malware hosting/C2

    • Reads information about phone network operator.

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Tasks