Resubmissions

06/09/2024, 14:29

240906-rtlwvs1drr6

06/09/2024, 14:08

240906-rfkrms1dne10

06/09/2024, 13:40

240906-qym42sygnk6

06/09/2024, 13:39

240906-qyb2sayglq6

28/08/2024, 15:20

240828-sq9desvhnn10

28/08/2024, 13:31

240828-qsmlbs1hpk7

06/08/2024, 09:54

240806-lxn8hawdpn7

06/08/2024, 09:51

240806-lvftcazekc10

General

  • Target
    b8ea74902684dcced62a5ca2c1d6932659decfefcbdb2615bfe5899e05eb1451
  • Size 3.0MB
  • Sample240906-rfkrms1dne
  • SHA256 b8ea74902684dcced62a5ca2c1d6932659decfefcbdb2615bfe5899e05eb1451
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      b8ea74902684dcced62a5ca2c1d6932659decfefcbdb2615bfe5899e05eb1451
    • Size 3.0MB
    • SHA256 b8ea74902684dcced62a5ca2c1d6932659decfefcbdb2615bfe5899e05eb1451
    • MD5 SHA1 SHA512 SSDEEP
    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries the mobile country code (MCC)

    • Target
      xecvbzvspk.apk
    • Size 3.7MB
    • SHA256 ddd40c0a5813b8e9bb72e004bc10799ec10068e909713c6542e88ef95100ab9c
    • MD5 SHA1 SHA512 SSDEEP
    • Chameleon

      Chameleon is an Android banking trojan first seen in 2023.

    • Chameleon payload

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Mobile v15

Tasks