General

  • Target

    ad1182d8bf3b1976e09f45b91085167559bc24e8f5e3f7315f96f344532cbcf8.apk

  • Size

    4.5MB

  • Sample

    240916-bx637ssdrf

  • MD5

    7c203ad3d565fce177adf272d0acd373

  • SHA1

    01b4ccd93e342d41c5ab357bf09472e84e256762

  • SHA256

    ad1182d8bf3b1976e09f45b91085167559bc24e8f5e3f7315f96f344532cbcf8

  • SHA512

    31b146bcfc4d2de0e5efe58c951e5bc7d7795d5f43b630349993db62c92c9dde5e6b52972433463c5a02fd7616e8e947aeb34a03a035ccf76832df34c05747be

  • SSDEEP

    98304:Gi4To7w2LyxNbX1cMXMVMUdAirmD0eID0ID01D0E2D0nA+D0qD0BD0yNl:8obyxNbkmDDODhDIDEDCTDDDYDPNl

Malware Config

Targets

    • Target

      ad1182d8bf3b1976e09f45b91085167559bc24e8f5e3f7315f96f344532cbcf8.apk

    • Size

      4.5MB

    • MD5

      7c203ad3d565fce177adf272d0acd373

    • SHA1

      01b4ccd93e342d41c5ab357bf09472e84e256762

    • SHA256

      ad1182d8bf3b1976e09f45b91085167559bc24e8f5e3f7315f96f344532cbcf8

    • SHA512

      31b146bcfc4d2de0e5efe58c951e5bc7d7795d5f43b630349993db62c92c9dde5e6b52972433463c5a02fd7616e8e947aeb34a03a035ccf76832df34c05747be

    • SSDEEP

      98304:Gi4To7w2LyxNbX1cMXMVMUdAirmD0eID0ID01D0E2D0nA+D0qD0BD0yNl:8obyxNbkmDDODhDIDEDCTDDDYDPNl

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

    • Queries the mobile country code (MCC)

    • Requests accessing notifications (often used to intercept notifications before users become aware).

MITRE ATT&CK Mobile v15

Tasks