General

  • Target

    VirusShare_98ec1306f6a34b5d09e21434ebae3e6c

  • Size

    186KB

  • Sample

    240610-mdf88agd44

  • MD5

    98ec1306f6a34b5d09e21434ebae3e6c

  • SHA1

    61a013e634ea63bb028e4d67d3ef7e02c8b379bb

  • SHA256

    6456d5cba37cc685f106f574af7e02c5d6a51b17370237fd53bf2ed22e268837

  • SHA512

    bde6714e5026a69f2195f4a0715dadb2de24d0b8d6dbdbdad58880c9bfe7e0d695285e804d13f6026ba66404e068a10f591b7e6038180b0ca7e5c97a92240055

  • SSDEEP

    3072:wA76dXscIe3QLUdRHaZ+b2p3q7Yc1stdOGQRX9SW21JtmwUdsdriJ4rRXEEvqcSc:wpKUdR6ZL3q/6oGQRcrgVderLuEvNeY

Malware Config

Targets

    • Target

      VirusShare_98ec1306f6a34b5d09e21434ebae3e6c

    • Size

      186KB

    • MD5

      98ec1306f6a34b5d09e21434ebae3e6c

    • SHA1

      61a013e634ea63bb028e4d67d3ef7e02c8b379bb

    • SHA256

      6456d5cba37cc685f106f574af7e02c5d6a51b17370237fd53bf2ed22e268837

    • SHA512

      bde6714e5026a69f2195f4a0715dadb2de24d0b8d6dbdbdad58880c9bfe7e0d695285e804d13f6026ba66404e068a10f591b7e6038180b0ca7e5c97a92240055

    • SSDEEP

      3072:wA76dXscIe3QLUdRHaZ+b2p3q7Yc1stdOGQRX9SW21JtmwUdsdriJ4rRXEEvqcSc:wpKUdR6ZL3q/6oGQRcrgVderLuEvNeY

    • Removes its main activity from the application launcher

    • Queries the phone number (MSISDN for GSM devices)

    • Reads the contacts stored on the device.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about active data network

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks