General
- Target b2e33d65260347f1d5503372c358f8cc0997295f06d48b525e430e424bc9bcae.bin
- Size 757KB
- Sample240809-17bsgswcqf
- SHA256 b2e33d65260347f1d5503372c358f8cc0997295f06d48b525e430e424bc9bcae
- MD5 5197ec0a00a125fe142f6eaed5546556
- SHA1 2913d402a8dccd50dd4704c715272bf6d402258e
- SHA512 002278f4c11cff4b0804867da3327c3c774605469891edbd301ebc1d0a479f359f92943e5015d92ab75f94d46fcc3eb8da9d66f4e2259db672fb55faf6952e1d
- SSDEEP 12288:rXr20oDv3p1oG1Vs+z4u2e7ekp4aVo31mBcqJ4qzIWicXjExTLG+8XlWMq8SLJpq:r720Mv3ADe/p4aM1yJK0zoG+VLShv
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
b2e33d65260347f1d5503372c358f8cc0997295f06d48b525e430e424bc9bcae.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
b2e33d65260347f1d5503372c358f8cc0997295f06d48b525e430e424bc9bcae.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
b2e33d65260347f1d5503372c358f8cc0997295f06d48b525e430e424bc9bcae.apk
Resource
android-x64-arm64-20240624-en
Malware Config
Targets
-
- Target b2e33d65260347f1d5503372c358f8cc0997295f06d48b525e430e424bc9bcae.bin
- Size 757KB
- SHA256 b2e33d65260347f1d5503372c358f8cc0997295f06d48b525e430e424bc9bcae
- MD5 5197ec0a00a125fe142f6eaed5546556
- SHA1 2913d402a8dccd50dd4704c715272bf6d402258e
- SHA512 002278f4c11cff4b0804867da3327c3c774605469891edbd301ebc1d0a479f359f92943e5015d92ab75f94d46fcc3eb8da9d66f4e2259db672fb55faf6952e1d
- SSDEEP 12288:rXr20oDv3p1oG1Vs+z4u2e7ekp4aVo31mBcqJ4qzIWicXjExTLG+8XlWMq8SLJpq:r720Mv3ADe/p4aM1yJK0zoG+VLShv
- MD5 SHA1 SHA512 SSDEEP
-
Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
-
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries the phone number (MSISDN for GSM devices)
-
Acquires the wake lock
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the mobile country code (MCC)
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-
Tries to add a device administrator.
MITRE ATT&CK Mobile v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Device Administrator Permissions
1Defense Evasion
Download New Code at Runtime
1Execution Guardrails
1Geofencing
1Hide Artifacts
1Suppress Application Icon
1Virtualization/Sandbox Evasion
2System Checks
2