ce2b0ca0830d018061d2340ecdabb41c3c7028884f940049fffb1e7cac092026 | Triage

Sharing

General

Target

CE2B0CA0830D018061D2340ECDABB41C3C7028884F940049FFFB1E7CAC092026.apk
Size

3.8MB
Sample

240627-kce9es1elg
MD5

a3f141b63743dacf3f64f4369f7b9bad
SHA1

41b1a85587ea95e80ee9d37f8c9d82533200ec08
SHA256

ce2b0ca0830d018061d2340ecdabb41c3c7028884f940049fffb1e7cac092026
SHA512

c7a954522bbf373e6a38e5bd8f3f2d12cba740224c962ec56d4f0ea314e0f9365511015f41170e8950683f25a59fc4a188182b24cc5f3b27a50560e8d965fa54
SSDEEP

98304:sURhD3x6IeSFIh3DoJPkyYE9L38i5GDopVuix4fKGO:dR53lFISJMyFVMicDopVuief2

Score

8^/10

android collection credential_access discovery evasion impact persistence

Malware Config

Targets

- Target
  
  CE2B0CA0830D018061D2340ECDABB41C3C7028884F940049FFFB1E7CAC092026.apk
- Size
  
  3.8MB
- MD5
  
  a3f141b63743dacf3f64f4369f7b9bad
- SHA1
  
  41b1a85587ea95e80ee9d37f8c9d82533200ec08
- SHA256
  
  ce2b0ca0830d018061d2340ecdabb41c3c7028884f940049fffb1e7cac092026
- SHA512
  
  c7a954522bbf373e6a38e5bd8f3f2d12cba740224c962ec56d4f0ea314e0f9365511015f41170e8950683f25a59fc4a188182b24cc5f3b27a50560e8d965fa54
- SSDEEP
  
  98304:sURhD3x6IeSFIh3DoJPkyYE9L38i5GDopVuix4fKGO:dR53lFISJMyFVMicDopVuief2
Score

8^/10

discovery evasion persistence collection credential_access impact
- Checks if the Android device is rooted.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Legitimate hosting services abused for malware hosting/C2
- Queries the mobile country code (MCC)
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

Process Discovery

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

collectioncredential_accessdiscoveryevasionimpactpersistence

behavioral3

collectioncredential_accessdiscoveryevasionimpact