General

  • Target

    Eblagh.apk

  • Size

    3.2MB

  • Sample

    240824-q6ahxsvdkm

  • MD5

    274c51ac1b22e4867883ebc90cacc65f

  • SHA1

    b09741e7d09c433a68d902a6e98ef3a968d09cda

  • SHA256

    5b4b1144f1026eff5bb29ca5cf87c14cb6c588c4446fb02f42858ba495fbb3d3

  • SHA512

    49bd0a9f1021335cd29cc8c110b19e9fca29c11f2e7dc5361948f9397feb880271d4b3ad5ea2bf19bf774f534cadfdad6b88c6e7500e4d3b0e539aa86724f355

  • SSDEEP

    49152:h/iYJsl5pIC9rOMZyEZhVU7218RMvfiNU9hZsot7XEXVVmcjPNSEi5I5pRWTN+NP:p/IDxOMgEqzSHSUpsotYdrAEi52RWTgN

Malware Config

Targets

    • Target

      Eblagh.apk

    • Size

      3.2MB

    • MD5

      274c51ac1b22e4867883ebc90cacc65f

    • SHA1

      b09741e7d09c433a68d902a6e98ef3a968d09cda

    • SHA256

      5b4b1144f1026eff5bb29ca5cf87c14cb6c588c4446fb02f42858ba495fbb3d3

    • SHA512

      49bd0a9f1021335cd29cc8c110b19e9fca29c11f2e7dc5361948f9397feb880271d4b3ad5ea2bf19bf774f534cadfdad6b88c6e7500e4d3b0e539aa86724f355

    • SSDEEP

      49152:h/iYJsl5pIC9rOMZyEZhVU7218RMvfiNU9hZsot7XEXVVmcjPNSEi5I5pRWTN+NP:p/IDxOMgEqzSHSUpsotYdrAEi52RWTgN

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Acquires the wake lock

    • Queries information about active data network

    • Queries the mobile country code (MCC)

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks