General

  • Target

    app-release.apk

  • Size

    425KB

  • Sample

    240708-scz8laxbnc

  • MD5

    4e07a109b35aebf233bfa1a9a2404e98

  • SHA1

    2f1b6cbc555a0c03f1b05bdf16235f212f396944

  • SHA256

    84f5c919d41a608532a483935d1fef5405f00d3566467d879f6f639d7ffeeffa

  • SHA512

    bd5ed79cfe7ea3e7dbcaa0a9f6ff16a53de06e081f1b10a8501a28bf162c64fdfb364b8a991bf04488d102b34958fe0e593a03fdff43e349806b9ca945dbb78e

  • SSDEEP

    6144:HI84XSnAewwzIBK9u4zeRC49bwa40sgZ+0hUpE+P9sCfJKZMTagJKrANsS+:o84X+fwmIBWz0C6lsgYHpE+PxfJpOgGv

Malware Config

Extracted

Family

ahmyth

C2

http://3.90.231.134:80

Targets

    • Target

      app-release.apk

    • Size

      425KB

    • MD5

      4e07a109b35aebf233bfa1a9a2404e98

    • SHA1

      2f1b6cbc555a0c03f1b05bdf16235f212f396944

    • SHA256

      84f5c919d41a608532a483935d1fef5405f00d3566467d879f6f639d7ffeeffa

    • SHA512

      bd5ed79cfe7ea3e7dbcaa0a9f6ff16a53de06e081f1b10a8501a28bf162c64fdfb364b8a991bf04488d102b34958fe0e593a03fdff43e349806b9ca945dbb78e

    • SSDEEP

      6144:HI84XSnAewwzIBK9u4zeRC49bwa40sgZ+0hUpE+P9sCfJKZMTagJKrANsS+:o84X+fwmIBWz0C6lsgYHpE+PxfJpOgGv

    • Removes its main activity from the application launcher

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Requests accessing notifications (often used to intercept notifications before users become aware).

MITRE ATT&CK Mobile v15

Tasks