6cd5feb4ff16926fe8c7443eb9e38c47768dce2a87a7d38f210b4a6fc9c5760b | Triage

Sharing

General

Target

6CD5FEB4FF16926FE8C7443EB9E38C47768DCE2A87A7D38F210B4A6FC9C5760B.apk
Size

15.7MB
Sample

240627-kcye1atgjj
MD5

6f1de63a845d5f14196c6f57e7fd8680
SHA1

6229fe154ddac84d329881fee192c6b095988443
SHA256

6cd5feb4ff16926fe8c7443eb9e38c47768dce2a87a7d38f210b4a6fc9c5760b
SHA512

3f59cbb5e06bc3c8da38fb06be4427fa2af36bbf8d627a452703625a06fce27575585137098b82fc720a121b5e56df9bdfa7915a11938e5a581161aac9780a56
SSDEEP

393216:fuEqd1CSPUnd5CixspsyPltW03ojvCi91SLOwzr:f82tSiCpQ0Yj1sn

Score

7^/10

android collection credential_access discovery evasion impact persistence

Malware Config

Targets

- Target
  
  6CD5FEB4FF16926FE8C7443EB9E38C47768DCE2A87A7D38F210B4A6FC9C5760B.apk
- Size
  
  15.7MB
- MD5
  
  6f1de63a845d5f14196c6f57e7fd8680
- SHA1
  
  6229fe154ddac84d329881fee192c6b095988443
- SHA256
  
  6cd5feb4ff16926fe8c7443eb9e38c47768dce2a87a7d38f210b4a6fc9c5760b
- SHA512
  
  3f59cbb5e06bc3c8da38fb06be4427fa2af36bbf8d627a452703625a06fce27575585137098b82fc720a121b5e56df9bdfa7915a11938e5a581161aac9780a56
- SSDEEP
  
  393216:fuEqd1CSPUnd5CixspsyPltW03ojvCi91SLOwzr:f82tSiCpQ0Yj1sn
Score

7^/10

discovery evasion impact persistence collection credential_access
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  evasion persistence
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Foreground Persistence

Privilege Escalation

Defense Evasion

Foreground Persistence

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Data Manipulation

Transmitted Data Manipulation

Tasks

static1

behavioral1

discoveryevasionimpactpersistence

behavioral2

collectioncredential_accessdiscoveryevasionimpactpersistence