Resubmissions

12/06/2024, 17:23

240612-vym69ssgqd8

07/06/2024, 13:02

240607-p959bshe658

General

  • Target
    SKALA VPN_4.3.7 (1).apk
  • Size 5.1MB
  • Sample240612-vym69ssgqd
  • SHA256 bc4397ac74d42b0b83877221c35e14318e1c7a9411441e3fd34d55e0ba801d10
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      SKALA VPN_4.3.7 (1).apk
    • Size 5.1MB
    • SHA256 bc4397ac74d42b0b83877221c35e14318e1c7a9411441e3fd34d55e0ba801d10
    • MD5 SHA1 SHA512 SSDEEP
    • Checks if the Android device is rooted.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Acquires the wake lock

    • Queries information about active data network

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

    • Checks the presence of a debugger

MITRE ATT&CK Mobile v15

Tasks