General

  • Target

    doublelocker.apk

  • Size

    359KB

  • Sample

    241009-e2417a1bmd

  • MD5

    85cfbd81ff6729927c968fbbb2d1d84d

  • SHA1

    01d962f809ae061d1895cf71db9eeb07900929b8

  • SHA256

    79e602a062d05fbb1409afc16e6d41ac0645576b2b5c1899dc93e6852c30a71f

  • SHA512

    26b24f7ee92e1185aa9f1160582c60cde8a814732dc3d293085eb0bf14fa48efe47f182d40d2bdb06f83f62e505ef542d5a042f2d2fc037811d70eb3c5865c86

  • SSDEEP

    6144:y4qHaAiB3RywInnBfnn3wy+bl/i2PNSlotYLAynYa9Bv1Mcq:y96AG3RyFnnBfnAy+bFzNSqtYLAyYa9a

Malware Config

Targets

    • Target

      doublelocker.apk

    • Size

      359KB

    • MD5

      85cfbd81ff6729927c968fbbb2d1d84d

    • SHA1

      01d962f809ae061d1895cf71db9eeb07900929b8

    • SHA256

      79e602a062d05fbb1409afc16e6d41ac0645576b2b5c1899dc93e6852c30a71f

    • SHA512

      26b24f7ee92e1185aa9f1160582c60cde8a814732dc3d293085eb0bf14fa48efe47f182d40d2bdb06f83f62e505ef542d5a042f2d2fc037811d70eb3c5865c86

    • SSDEEP

      6144:y4qHaAiB3RywInnBfnn3wy+bl/i2PNSlotYLAynYa9Bv1Mcq:y96AG3RyFnnBfnAy+bFzNSqtYLAyYa9a

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

    • Queries information about active data network

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Requests enabling of the accessibility settings.

    • Tries to add a device administrator.

MITRE ATT&CK Mobile v15

Tasks