9175baf1c90188b01b3e35b90ef72c9dd2a88a66aa95022f58103016b7524744 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LocationEye.apk
Size

6.2MB
Sample

240713-vtb87szdnm
MD5

f9c0a3c6293cafcbde9b121142fb0efc
SHA1

0b8be92bfe23c9c42950fe1c50152d6e1e3a966d
SHA256

9175baf1c90188b01b3e35b90ef72c9dd2a88a66aa95022f58103016b7524744
SHA512

c38d489042ba41df7ab6632b26b8ab3ab719427c66663c02f090a77c8697c8b924549781eec50773dc0b4a0cc4d6cec821e87317173818e072871df6c7de9d50
SSDEEP

196608:rj5iXh2vtPQq1bo/tZXck2jLH5CtXfJ6p8j:uetYuboDMlH528pg

Score

7^/10

android spotify collection credential_access discovery evasion impact persistence phishing

Malware Config

Targets

- Target
  
  LocationEye.apk
- Size
  
  6.2MB
- MD5
  
  f9c0a3c6293cafcbde9b121142fb0efc
- SHA1
  
  0b8be92bfe23c9c42950fe1c50152d6e1e3a966d
- SHA256
  
  9175baf1c90188b01b3e35b90ef72c9dd2a88a66aa95022f58103016b7524744
- SHA512
  
  c38d489042ba41df7ab6632b26b8ab3ab719427c66663c02f090a77c8697c8b924549781eec50773dc0b4a0cc4d6cec821e87317173818e072871df6c7de9d50
- SSDEEP
  
  196608:rj5iXh2vtPQq1bo/tZXck2jLH5CtXfJ6p8j:uetYuboDMlH528pg
Score

7^/10

collection credential_access discovery evasion impact persistence spotify phishing
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  evasion persistence
- Queries the mobile country code (MCC)
  discovery
- Detected potential entity reuse from brand spotify.
  phishing spotify
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Foreground Persistence

Privilege Escalation

Defense Evasion

Foreground Persistence

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Tasks

static1

behavioral1

collectioncredential_accessdiscoveryevasionimpactpersistence

behavioral2

spotifycollectioncredential_accessevasionimpactpersistencephishing

behavioral3

collectioncredential_accessevasionimpactpersistence

behavioral4

discoveryevasionpersistence