General

  • Target

    9F86529F11AF9DC52E466C459AE6F0D008AB1CA2A322CFB27277A71161BC142C.apk

  • Size

    39.3MB

  • Sample

    240627-ka8sys1djd

  • MD5

    aaeffa2f72945060c6339a4ff8e279ce

  • SHA1

    22cc44dee7d98cde206ac273bc09e84d41d42827

  • SHA256

    9f86529f11af9dc52e466c459ae6f0d008ab1ca2a322cfb27277a71161bc142c

  • SHA512

    d3d0a386b550dbf799491bfb5bf833f30f0f598f6ec2e3acff92e0be73588d88ff8b8b8d28ebe84af2e9d4b50ec50bc75c8fd755a30f4e1f370422628c5fa53b

  • SSDEEP

    786432:k8GyTpxb6w30e8GOJ7nojGpYk3wYUg59492hCro50aAOcCixBJzPVYs91RX:JGeb6e8TxnojGTUgtCro5zlcCixBPVNX

Malware Config

Targets

    • Target

      9F86529F11AF9DC52E466C459AE6F0D008AB1CA2A322CFB27277A71161BC142C.apk

    • Size

      39.3MB

    • MD5

      aaeffa2f72945060c6339a4ff8e279ce

    • SHA1

      22cc44dee7d98cde206ac273bc09e84d41d42827

    • SHA256

      9f86529f11af9dc52e466c459ae6f0d008ab1ca2a322cfb27277a71161bc142c

    • SHA512

      d3d0a386b550dbf799491bfb5bf833f30f0f598f6ec2e3acff92e0be73588d88ff8b8b8d28ebe84af2e9d4b50ec50bc75c8fd755a30f4e1f370422628c5fa53b

    • SSDEEP

      786432:k8GyTpxb6w30e8GOJ7nojGpYk3wYUg59492hCro50aAOcCixBJzPVYs91RX:JGeb6e8TxnojGTUgtCro5zlcCixBPVNX

    • Checks if the Android device is rooted.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Queries the phone number (MSISDN for GSM devices)

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Listens for changes in the sensor environment (might be used to detect emulation)

MITRE ATT&CK Mobile v15

Tasks