General

  • Target

    Certificato N26 malevolo.apk

  • Size

    4.6MB

  • Sample

    240919-k17cta1ejj

  • MD5

    d5b765f43eb431f3a4b8e49905282843

  • SHA1

    e8575ac8924c6600e3ad00fc93f557ae63d542a8

  • SHA256

    ab85b62cad1a4009bf99c621b4950ee23c413b5c424952f225497bca7a318a99

  • SHA512

    6280f9750c380644df40f0bd59b366340a67b7ed541e0a7fa5b4de02ab2e6d80e87b0545397b74097944f0346d2d3e2977321f5cd8a6835e2126a5d5242c25e2

  • SSDEEP

    98304:BMOakZsLOKswMzhAZXilVI5fD0eaD0qD0zD0EMD0nAoD0sD0XD0NX4:BMOsyK5Mzh2Xv5fD4D3DyDiDCJDpDaDr

Malware Config

Targets

    • Target

      Certificato N26 malevolo.apk

    • Size

      4.6MB

    • MD5

      d5b765f43eb431f3a4b8e49905282843

    • SHA1

      e8575ac8924c6600e3ad00fc93f557ae63d542a8

    • SHA256

      ab85b62cad1a4009bf99c621b4950ee23c413b5c424952f225497bca7a318a99

    • SHA512

      6280f9750c380644df40f0bd59b366340a67b7ed541e0a7fa5b4de02ab2e6d80e87b0545397b74097944f0346d2d3e2977321f5cd8a6835e2126a5d5242c25e2

    • SSDEEP

      98304:BMOakZsLOKswMzhAZXilVI5fD0eaD0qD0zD0EMD0nAoD0sD0XD0NX4:BMOsyK5Mzh2Xv5fD4D3DyDiDCJDpDaDr

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

    • Queries the mobile country code (MCC)

    • Requests accessing notifications (often used to intercept notifications before users become aware).

MITRE ATT&CK Mobile v15

Tasks