Resubmissions

10-08-2024 13:29

240810-qrkekswajg 10

10-08-2024 13:26

240810-qpxbcs1dmq 10

10-08-2024 13:26

240810-qpm3pa1dmj 10

General

  • Target

    Shield Plus_6.2.apk

  • Size

    8.1MB

  • Sample

    240810-qrkekswajg

  • MD5

    5b7d31fb9202d6b559263fac309eb477

  • SHA1

    587856a9368146e701ad654087329d4636cd62d1

  • SHA256

    add00a4daf4de36f154c7313a13c155fd5a922119cb087d6cd93ed4b2fe372bc

  • SHA512

    42dd54f71a23bc47ea92613b7a8b8b74f01cc8ec8b9e65afbb7c4bdbbb3d51ac510cba8ea68341f603ac177475a034d80f9849467fb6ead64f1db1b9de45366b

  • SSDEEP

    196608:Wyw2BxZNmiYIQFBCuZ4NOzCjj8IkxCfgEK:Dw2T7mibQFBCw4NqcIIkxC4n

Malware Config

Targets

    • Target

      Shield Plus_6.2.apk

    • Size

      8.1MB

    • MD5

      5b7d31fb9202d6b559263fac309eb477

    • SHA1

      587856a9368146e701ad654087329d4636cd62d1

    • SHA256

      add00a4daf4de36f154c7313a13c155fd5a922119cb087d6cd93ed4b2fe372bc

    • SHA512

      42dd54f71a23bc47ea92613b7a8b8b74f01cc8ec8b9e65afbb7c4bdbbb3d51ac510cba8ea68341f603ac177475a034d80f9849467fb6ead64f1db1b9de45366b

    • SSDEEP

      196608:Wyw2BxZNmiYIQFBCuZ4NOzCjj8IkxCfgEK:Dw2T7mibQFBCw4NqcIIkxC4n

    • Checks if the Android device is rooted.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Checks the application is allowed to request package installs through the package installer

      Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

    • Requests allowing to install additional applications from unknown sources.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Mobile v15

Tasks