General

  • Target

    ZIWELY.apk

  • Size

    1.9MB

  • Sample

    241009-x6qngawgjh

  • MD5

    64a932240e284dade1a8b81e8a0fb1a4

  • SHA1

    f7c8f62e4827e2670e9abcabd1d2781008dc2628

  • SHA256

    b19bda1d1b12fc14a1d8c96fdb8624430c73218052dd871cb345ca85b365e881

  • SHA512

    e57d1ff55a903a2960ff9a9a79238afa6ed45091ecd9b0ff4037be2eb6fe8799a67b4b8f6c378a9dffb18524e1bf22068983d9188cdfd08edc64e3ac5bf03243

  • SSDEEP

    49152:qSYAkFR8MvFlsl4ND32ItPuRFpqVbeTTpl+Sz3:ZzUtFWl832ItPu5qVbw+Sz3

Malware Config

Targets

    • Target

      ZIWELY.apk

    • Size

      1.9MB

    • MD5

      64a932240e284dade1a8b81e8a0fb1a4

    • SHA1

      f7c8f62e4827e2670e9abcabd1d2781008dc2628

    • SHA256

      b19bda1d1b12fc14a1d8c96fdb8624430c73218052dd871cb345ca85b365e881

    • SHA512

      e57d1ff55a903a2960ff9a9a79238afa6ed45091ecd9b0ff4037be2eb6fe8799a67b4b8f6c378a9dffb18524e1bf22068983d9188cdfd08edc64e3ac5bf03243

    • SSDEEP

      49152:qSYAkFR8MvFlsl4ND32ItPuRFpqVbeTTpl+Sz3:ZzUtFWl832ItPu5qVbw+Sz3

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about active data network

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

    • Requests enabling of the accessibility settings.

    • Tries to add a device administrator.

MITRE ATT&CK Mobile v15

Tasks