General

  • Target

    6683f3561c890a35884834627da041d90ddf97b6572db976444233c6dcb59c00.bin

  • Size

    672KB

  • Sample

    240714-1yr34svbrn

  • MD5

    10a420291e5ade9d8d8f320eafccc184

  • SHA1

    c333665b35e32940c040f035420f5277b30616e0

  • SHA256

    6683f3561c890a35884834627da041d90ddf97b6572db976444233c6dcb59c00

  • SHA512

    2ec833d7a9fa3ab5ee5788167ab76b542e163684ac2b984e0195fd85eee2df9ab9b51e83939adbe3446ed2f0b89d54e6e97297c7269a59f7f429c7a39289168f

  • SSDEEP

    12288:MBVBED9V8HxbQRZO/5oJukhQJBv/S8t8K6xoq5rSI9M+PEDkhCuZj3SjHXR3:6VBEDn8HxERo/mJuEEx4KARrSIpPEDxV

Malware Config

Targets

    • Target

      6683f3561c890a35884834627da041d90ddf97b6572db976444233c6dcb59c00.bin

    • Size

      672KB

    • MD5

      10a420291e5ade9d8d8f320eafccc184

    • SHA1

      c333665b35e32940c040f035420f5277b30616e0

    • SHA256

      6683f3561c890a35884834627da041d90ddf97b6572db976444233c6dcb59c00

    • SHA512

      2ec833d7a9fa3ab5ee5788167ab76b542e163684ac2b984e0195fd85eee2df9ab9b51e83939adbe3446ed2f0b89d54e6e97297c7269a59f7f429c7a39289168f

    • SSDEEP

      12288:MBVBED9V8HxbQRZO/5oJukhQJBv/S8t8K6xoq5rSI9M+PEDkhCuZj3SjHXR3:6VBEDn8HxERo/mJuEEx4KARrSIpPEDxV

    • Removes its main activity from the application launcher

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries the phone number (MSISDN for GSM devices)

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about active data network

    • Tries to add a device administrator.

MITRE ATT&CK Mobile v15

Tasks