smseye | e7cd1bcd6452bacd1176be56d183d4dc4960615740d854c686a1b1e3d8cd13e0 | Triage

Sharing

General

Target

sms eye app_src_mod.apk
Size

7.7MB
Sample

240703-z2pxgsxcln
MD5

ce9377a43039e9a9b6d19cddfce9f35e
SHA1

88b24c7c0a26abc6a8284c74af21af7ca044e288
SHA256

e7cd1bcd6452bacd1176be56d183d4dc4960615740d854c686a1b1e3d8cd13e0
SHA512

c29b990b584ce46d7d25f12299dc04488cc5c8aa2503b3370ca17aef114990d618f060c3f6518bbf59bdad7eb405ff9249ee77cea8b3a6b2f1084c014e820dd6
SSDEEP

196608:KwXcCnmhMHi3xtvYrJaOy/4JsaiSxcymkF85:KkXmeifuarAJpiFymk2

Score

10^/10

smseye android discovery persistence

Malware Config

Targets

- Target
  
  sms eye app_src_mod.apk
- Size
  
  7.7MB
- MD5
  
  ce9377a43039e9a9b6d19cddfce9f35e
- SHA1
  
  88b24c7c0a26abc6a8284c74af21af7ca044e288
- SHA256
  
  e7cd1bcd6452bacd1176be56d183d4dc4960615740d854c686a1b1e3d8cd13e0
- SHA512
  
  c29b990b584ce46d7d25f12299dc04488cc5c8aa2503b3370ca17aef114990d618f060c3f6518bbf59bdad7eb405ff9249ee77cea8b3a6b2f1084c014e820dd6
- SSDEEP
  
  196608:KwXcCnmhMHi3xtvYrJaOy/4JsaiSxcymkF85:KkXmeifuarAJpiFymk2
Score

6^/10

discovery persistence
- Legitimate hosting services abused for malware hosting/C2
- Queries the mobile country code (MCC)
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

behavioral3