General

  • Target

    ZITGCD.apk

  • Size

    2.0MB

  • Sample

    240717-aw6kls1ala

  • MD5

    a0e8f8688a7b73814d90c38f94bc8021

  • SHA1

    61e071e9e917c07740d5cafe2e162198de5254e7

  • SHA256

    eab2ab7bfc55c6a6012eef19b5fcdc8d98b34351dc32e0e9e09203a60bc392d0

  • SHA512

    3fc28860a29da446f81de2004e43176cbca3f9a441a2b7366113440d0236033467740e7d66ffef8f64a94f744a50a62c3254d824ae2ac427180051177f850a93

  • SSDEEP

    24576:SmNrIzgqUpCawONHO0hE7uclW5p+0CpQK9Kl19E708iTol9ZbzDo2lB/VlBGN5TU:NyYwONHZBHLK9K1rMxNf/ENFq7Tplx

Malware Config

Targets

    • Target

      ZITGCD.apk

    • Size

      2.0MB

    • MD5

      a0e8f8688a7b73814d90c38f94bc8021

    • SHA1

      61e071e9e917c07740d5cafe2e162198de5254e7

    • SHA256

      eab2ab7bfc55c6a6012eef19b5fcdc8d98b34351dc32e0e9e09203a60bc392d0

    • SHA512

      3fc28860a29da446f81de2004e43176cbca3f9a441a2b7366113440d0236033467740e7d66ffef8f64a94f744a50a62c3254d824ae2ac427180051177f850a93

    • SSDEEP

      24576:SmNrIzgqUpCawONHO0hE7uclW5p+0CpQK9Kl19E708iTol9ZbzDo2lB/VlBGN5TU:NyYwONHZBHLK9K1rMxNf/ENFq7Tplx

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about active data network

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

    • Requests enabling of the accessibility settings.

    • Tries to add a device administrator.

MITRE ATT&CK Matrix

Tasks