General

  • Target

    hhhhhhhh.apk

  • Size

    5.7MB

  • Sample

    240728-ya1z1avbmd

  • MD5

    0ffac152fbfcee69fe73a839e07bf87f

  • SHA1

    6b853970db20a4d30bcac48d27daf20c9de1936a

  • SHA256

    8294730cf037a8fb022ff83c1060cb1c684d1b19bb7db4714455de72837bd796

  • SHA512

    f6b7761815bd909211787b3a97e110476d4f01473c902b3481a676844d896092b2779b0c1c6c3deb613c9f6d10e195ee1e956d96cbb6f667b8ebab24d3ea8a5a

  • SSDEEP

    98304:ROOdNwAyr+zVWzZr7HdxJl4l6957mzJzByTP0tMMn4C1wdn4C1wIRzqTZ:RpdNwNr+5WzZr7dbqSqz2AH4Cmd4CmIo

Malware Config

Targets

    • Target

      hhhhhhhh.apk

    • Size

      5.7MB

    • MD5

      0ffac152fbfcee69fe73a839e07bf87f

    • SHA1

      6b853970db20a4d30bcac48d27daf20c9de1936a

    • SHA256

      8294730cf037a8fb022ff83c1060cb1c684d1b19bb7db4714455de72837bd796

    • SHA512

      f6b7761815bd909211787b3a97e110476d4f01473c902b3481a676844d896092b2779b0c1c6c3deb613c9f6d10e195ee1e956d96cbb6f667b8ebab24d3ea8a5a

    • SSDEEP

      98304:ROOdNwAyr+zVWzZr7HdxJl4l6957mzJzByTP0tMMn4C1wdn4C1wIRzqTZ:RpdNwNr+5WzZr7dbqSqz2AH4Cmd4CmIo

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries the mobile country code (MCC)

    • Requests enabling of the accessibility settings.

MITRE ATT&CK Mobile v15

Tasks