triada | 0fff458c0166d923d7a63b036e9d6353a4afde4bb89b7de09048a8fa146e8417 | Triage

Sharing

General

Target

WALiteX1.30.1CloneBy.WALiteX.apk
Size

74.3MB
Sample

240920-kh4tzaxemc
MD5

dd360bb946a2cfc835dc82246acb5485
SHA1

52ce2853276b4f1643dc20aa2cd1989a6ede8741
SHA256

0fff458c0166d923d7a63b036e9d6353a4afde4bb89b7de09048a8fa146e8417
SHA512

6da75042eee2a4ead2a2ad829142c3d0bc17af551191b7d9de21f3e978db53c1b71ce3b765dbe7bd2f4b4b8921f6296feba1f26d558ed12f7e114d1d703adbce
SSDEEP

1572864:vI24ehVGHfbu4znXc/B46+uKgyWzitw8kZkrNLicLPL:vI24dHfbu4znXUR+uKg07gSPL

Score

10^/10

triada android discovery execution impact persistence upx

Malware Config

Targets

- Target
  
  WALiteX1.30.1CloneBy.WALiteX.apk
- Size
  
  74.3MB
- MD5
  
  dd360bb946a2cfc835dc82246acb5485
- SHA1
  
  52ce2853276b4f1643dc20aa2cd1989a6ede8741
- SHA256
  
  0fff458c0166d923d7a63b036e9d6353a4afde4bb89b7de09048a8fa146e8417
- SHA512
  
  6da75042eee2a4ead2a2ad829142c3d0bc17af551191b7d9de21f3e978db53c1b71ce3b765dbe7bd2f4b4b8921f6296feba1f26d558ed12f7e114d1d703adbce
- SSDEEP
  
  1572864:vI24ehVGHfbu4znXc/B46+uKgyWzitw8kZkrNLicLPL:vI24dHfbu4znXUR+uKg07gSPL
Score

6^/10

discovery execution impact persistence
- Acquires the wake lock
- Legitimate hosting services abused for malware hosting/C2
- Queries information about active data network
  discovery
- Reads information about phone network operator.
  discovery
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

Persistence

Event Triggered Execution

Broadcast Receivers

Scheduled Task/Job

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

discoveryexecutionimpactpersistence