bdc02f8d7aed97a6c5bc2e6dd43fced79e958c9d000edff59547686627919919 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdc02f8d7aed97a6c5bc2e6dd43fced79e958c9d000edff59547686627919919
Size

3.8MB
Sample

240810-r6qetatfrk
MD5

9a8f3c861b9ffb5fdca53d59ae7edd8a
SHA1

e665f7ec8025480dd0e72ada714db6ddf4cf9411
SHA256

bdc02f8d7aed97a6c5bc2e6dd43fced79e958c9d000edff59547686627919919
SHA512

b8b7ee250cbca3447ff9fe048ceb7b771305c1b41fd3bb37ccb818ec65f8aa556a4910e513474fbf5c09bca619d9d66cad5e049ff7fa9880ccfb1ea493a6a5bf
SSDEEP

98304:IEZc1gEFN2vmN23FfKJO6dK/RZXh2tra2ruQc6:2iEFo+2V0Od/R7srFd

Score

8^/10

android discovery evasion persistence stealth trojan

Malware Config

Targets

- Target
  
  bdc02f8d7aed97a6c5bc2e6dd43fced79e958c9d000edff59547686627919919
- Size
  
  3.8MB
- MD5
  
  9a8f3c861b9ffb5fdca53d59ae7edd8a
- SHA1
  
  e665f7ec8025480dd0e72ada714db6ddf4cf9411
- SHA256
  
  bdc02f8d7aed97a6c5bc2e6dd43fced79e958c9d000edff59547686627919919
- SHA512
  
  b8b7ee250cbca3447ff9fe048ceb7b771305c1b41fd3bb37ccb818ec65f8aa556a4910e513474fbf5c09bca619d9d66cad5e049ff7fa9880ccfb1ea493a6a5bf
- SSDEEP
  
  98304:IEZc1gEFN2vmN23FfKJO6dK/RZXh2tra2ruQc6:2iEFo+2V0Od/R7srFd
Score

1^/10
behavioral1 behavioral2
- Target
  
  patch.dat
- Size
  
  148KB
- MD5
  
  3fab9e8b0858b6f525c6d54a4a7f8b5b
- SHA1
  
  f57e40e1a2ee8bc866ced12b7c6a36365a7dfeee
- SHA256
  
  1b779958f154b2dbd8a01f5c97863b5156491e0b09735935cd4b8680872fc371
- SHA512
  
  8114be5b8235411dcec39f2fc1a258c82bd3741572a32fa93dc5f791543541205c334962f9dc3ea7b0b2c37c62ef0588f75a54feeec80b7c258625064b1b3380
- SSDEEP
  
  3072:XzoA3ww6TyJOtd0U704ip2zKxgOsCOnpqSsmnGH/FHBg:DZ3wkcd/wb2zzOsCmoMCI
Score

8^/10

discovery evasion persistence stealth trojan
- Removes its main activity from the application launcher
  stealth trojan evasion
- Queries the mobile country code (MCC)
  discovery
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
behavioral3 behavioral4 behavioral5

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Hide Artifacts

Suppress Application Icon

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

discoveryevasionpersistencestealthtrojan

behavioral4

discoveryevasionpersistencestealthtrojan

behavioral5

discoveryevasionstealthtrojan