General

  • Target

    tivi.bg.apk

  • Size

    11.0MB

  • Sample

    240808-qlr78sxeqh

  • MD5

    5560db2a375361470c85eecffd0c4613

  • SHA1

    b380d9f5a80d5787dcc4bf6ff393dd597286344c

  • SHA256

    2e67d4c4c12ab161c8bc351fc4d9b8a256fb75a0c7172dfd07a313789704ca41

  • SHA512

    14bd617869f1c610d41fa984b6d4d16af0d40ff3b0aeea694061ccfb907500a89ec982dcd9e057c0ce148f5f009fa85efdeb37637d9074e6c4bd630f87f6c676

  • SSDEEP

    196608:aEiUVRPSNi+/FxHCcv1Dyv3LY+8piLril1TxXzg5ernWheKt:3VRQppQvt8pO+nXzqheKt

Malware Config

Targets

    • Target

      tivi.bg.apk

    • Size

      11.0MB

    • MD5

      5560db2a375361470c85eecffd0c4613

    • SHA1

      b380d9f5a80d5787dcc4bf6ff393dd597286344c

    • SHA256

      2e67d4c4c12ab161c8bc351fc4d9b8a256fb75a0c7172dfd07a313789704ca41

    • SHA512

      14bd617869f1c610d41fa984b6d4d16af0d40ff3b0aeea694061ccfb907500a89ec982dcd9e057c0ce148f5f009fa85efdeb37637d9074e6c4bd630f87f6c676

    • SSDEEP

      196608:aEiUVRPSNi+/FxHCcv1Dyv3LY+8piLril1TxXzg5ernWheKt:3VRQppQvt8pO+nXzqheKt

    • Legitimate hosting services abused for malware hosting/C2

    • Queries information about active data network

    • Reads information about phone network operator.

    • Checks the presence of a debugger

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Tasks