General
- Target 6d6774973a12cc7724a7729f6a6ab6a7ece755f7eb3c5b339a01b9de4a1cf2fe.bin
- Size 1.0MB
- Sample240809-17cd1swcqg
- SHA256 6d6774973a12cc7724a7729f6a6ab6a7ece755f7eb3c5b339a01b9de4a1cf2fe
- MD5 1e18f0bc52ba485fd1f839f670413cb9
- SHA1 e3aae4c17029cb71a7db2abc076e77aa0a157a53
- SHA512 002574e5d3e09197a03479160f4f308857dec1f8e2f412c373c166c27e480ae478c247abaa4e9459eb0cdaf95a951e070ff40284ba869198a8a7db48e199a193
- SSDEEP 24576:9qA5ozZWrqvgb3NwvNHPziWGJDOND1tias3Mk13mzJLA+GvAiH:9r5UZOiG6GWKc3ias3j13mzZcA0
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
6d6774973a12cc7724a7729f6a6ab6a7ece755f7eb3c5b339a01b9de4a1cf2fe.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
6d6774973a12cc7724a7729f6a6ab6a7ece755f7eb3c5b339a01b9de4a1cf2fe.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
6d6774973a12cc7724a7729f6a6ab6a7ece755f7eb3c5b339a01b9de4a1cf2fe.apk
Resource
android-x64-arm64-20240624-en
Malware Config
Targets
-
- Target 6d6774973a12cc7724a7729f6a6ab6a7ece755f7eb3c5b339a01b9de4a1cf2fe.bin
- Size 1.0MB
- SHA256 6d6774973a12cc7724a7729f6a6ab6a7ece755f7eb3c5b339a01b9de4a1cf2fe
- MD5 1e18f0bc52ba485fd1f839f670413cb9
- SHA1 e3aae4c17029cb71a7db2abc076e77aa0a157a53
- SHA512 002574e5d3e09197a03479160f4f308857dec1f8e2f412c373c166c27e480ae478c247abaa4e9459eb0cdaf95a951e070ff40284ba869198a8a7db48e199a193
- SSDEEP 24576:9qA5ozZWrqvgb3NwvNHPziWGJDOND1tias3Mk13mzJLA+GvAiH:9r5UZOiG6GWKc3ias3j13mzZcA0
- MD5 SHA1 SHA512 SSDEEP
Checks known Qemu pipes.
Checks for known pipes used by the Android emulator to communicate with the host.
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
Queries the phone number (MSISDN for GSM devices)
Acquires the wake lock
Queries information about active data network
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Queries the mobile country code (MCC)
Queries the unique device ID (IMEI, MEID, IMSI)
Reads information about phone network operator.
Tries to add a device administrator.
MITRE ATT&CK Mobile v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Device Administrator Permissions
1Defense Evasion
Download New Code at Runtime
1Execution Guardrails
1Geofencing
1Hide Artifacts
1Suppress Application Icon
1Virtualization/Sandbox Evasion
2System Checks
2