Resubmissions

22/07/2024, 16:39

240722-t6aepswhrd 7

22/07/2024, 16:34

240722-t3k22axdrl 7

General

  • Target

    telegram1.1.apk

  • Size

    71.1MB

  • Sample

    240722-t6aepswhrd

  • MD5

    67480eff2e577e5078ea05e9317d2716

  • SHA1

    164847b90b3d329a9e47bfe0d45d00796952cbce

  • SHA256

    813b130b5394d8230fcedafb47e38814f8a8e4e9baaaa9c6070700e9429dbfcb

  • SHA512

    293f80829e09e35b8011580cbbd593f2ed0c8ac515dfc293202c4d3c00b065fd002de127b3cc99c15327c6d76b7d4d18456c792b124ace875192d3182493d81a

  • SSDEEP

    1572864:YZwDKeuv0hJ3ZO/ZyeMDNHnHkuDdEnW3VwLFGDRF+yX0GQaN:9CvKzO/Z/MDxnXdEnQAFWBDtN

Malware Config

Targets

    • Target

      telegram1.1.apk

    • Size

      71.1MB

    • MD5

      67480eff2e577e5078ea05e9317d2716

    • SHA1

      164847b90b3d329a9e47bfe0d45d00796952cbce

    • SHA256

      813b130b5394d8230fcedafb47e38814f8a8e4e9baaaa9c6070700e9429dbfcb

    • SHA512

      293f80829e09e35b8011580cbbd593f2ed0c8ac515dfc293202c4d3c00b065fd002de127b3cc99c15327c6d76b7d4d18456c792b124ace875192d3182493d81a

    • SSDEEP

      1572864:YZwDKeuv0hJ3ZO/ZyeMDNHnHkuDdEnW3VwLFGDRF+yX0GQaN:9CvKzO/Z/MDxnXdEnQAFWBDtN

    • Checks known Qemu pipes.

      Checks for known pipes used by the Android emulator to communicate with the host.

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

    • Reads the contacts stored on the device.

    • Reads the content of photos stored on the user's device.

    • Acquires the wake lock

    • Queries information about active data network

MITRE ATT&CK Mobile v15

Tasks