General

  • Target

    230f3d74004fee235055e786aba413abff2ed5cf4faa1987a070493be28c75d1.bin

  • Size

    4.5MB

  • Sample

    240629-12y1tsxemh

  • MD5

    d55ee912c682c9c6aecec279681c6443

  • SHA1

    0bdba6764e5384f8810a7006899cb667f7abed69

  • SHA256

    230f3d74004fee235055e786aba413abff2ed5cf4faa1987a070493be28c75d1

  • SHA512

    5660978c9af7a699f45462591bdca8e34b1f7e764b726cda02778317f476f18ed4c94a3ff5245b96336d3d8563be77e0d5fbc2db24b94ec2ea61c1f7a2fa898d

  • SSDEEP

    98304:oGZm/UcvLXo+yDW1AN9mfg2rpD0eDD0LD0+D0EFD0nAFD0BD02D01zD:oGZs/0XDWKXwDRDKDrDDDCoDgDvDQzD

Malware Config

Targets

    • Target

      230f3d74004fee235055e786aba413abff2ed5cf4faa1987a070493be28c75d1.bin

    • Size

      4.5MB

    • MD5

      d55ee912c682c9c6aecec279681c6443

    • SHA1

      0bdba6764e5384f8810a7006899cb667f7abed69

    • SHA256

      230f3d74004fee235055e786aba413abff2ed5cf4faa1987a070493be28c75d1

    • SHA512

      5660978c9af7a699f45462591bdca8e34b1f7e764b726cda02778317f476f18ed4c94a3ff5245b96336d3d8563be77e0d5fbc2db24b94ec2ea61c1f7a2fa898d

    • SSDEEP

      98304:oGZm/UcvLXo+yDW1AN9mfg2rpD0eDD0LD0+D0EFD0nAFD0BD02D01zD:oGZs/0XDWKXwDRDKDrDDDCoDgDvDQzD

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Reads the contacts stored on the device.

    • Acquires the wake lock

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

    • Requests accessing notifications (often used to intercept notifications before users become aware).

MITRE ATT&CK Mobile v15

Tasks