General

  • Target

    N26.apk

  • Size

    4.6MB

  • Sample

    240919-k1622s1drr

  • MD5

    eaff7697d0bc139cd3f2c2527522982e

  • SHA1

    8cf89e59bb4d4723f86bee09a087cab95466a473

  • SHA256

    6bc1ac4f844a6940c9e083c32bbf3f469b1322cc5aa83e12ab1a7f35cdb51c23

  • SHA512

    d7b862d2bb2f452020dd0c361f66d041afbd88f07517f4dedc3ed305b33df44fef244510f960378747308fa241abf6eb3dfb5b08bea9ebea15187f26506150df

  • SSDEEP

    98304:397cbefbtcWiwg2t4Zn7xiIyaCx7dsvFlD0eMD0kD0xD0E6D0nAyD0WD01D0bqk:397ZfZcY6NBybdsvFlDSDtDMDIDCfD3l

Malware Config

Targets

    • Target

      N26.apk

    • Size

      4.6MB

    • MD5

      eaff7697d0bc139cd3f2c2527522982e

    • SHA1

      8cf89e59bb4d4723f86bee09a087cab95466a473

    • SHA256

      6bc1ac4f844a6940c9e083c32bbf3f469b1322cc5aa83e12ab1a7f35cdb51c23

    • SHA512

      d7b862d2bb2f452020dd0c361f66d041afbd88f07517f4dedc3ed305b33df44fef244510f960378747308fa241abf6eb3dfb5b08bea9ebea15187f26506150df

    • SSDEEP

      98304:397cbefbtcWiwg2t4Zn7xiIyaCx7dsvFlD0eMD0kD0xD0E6D0nAyD0WD01D0bqk:397ZfZcY6NBybdsvFlDSDtDMDIDCfD3l

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

    • Queries the mobile country code (MCC)

    • Requests accessing notifications (often used to intercept notifications before users become aware).

MITRE ATT&CK Mobile v15

Tasks