General

  • Target

    Peniel_Cleaning_9331.apk

  • Size

    4.4MB

  • Sample

    241010-hd166swakn

  • MD5

    d6432f72451e68eeb37bf251c0e01bf7

  • SHA1

    cc6eae1b9a6aa8515886bb578b00e8e5e0bc2bfc

  • SHA256

    71f4afc0a519c40c7cff3930102b84f59c0d2135a01aa42251a255b6c2a6d3b6

  • SHA512

    2c260ec97a0f2f1793219a416aa81148215f59a22b15f21919386a6b2d65a32b6e808fc92ae06e52e12571a4c9eab8d26e599e19c2608b49f0b0de2490abcae9

  • SSDEEP

    98304:qcrzBGT5mzEG0tQBSXPjG3XZ+YV/rAZFgl+Xxo3N4ZNGREW8SD1:SMz6QBy7GHJ/rGecNGRbTD1

Malware Config

Targets

    • Target

      Peniel_Cleaning_9331.apk

    • Size

      4.4MB

    • MD5

      d6432f72451e68eeb37bf251c0e01bf7

    • SHA1

      cc6eae1b9a6aa8515886bb578b00e8e5e0bc2bfc

    • SHA256

      71f4afc0a519c40c7cff3930102b84f59c0d2135a01aa42251a255b6c2a6d3b6

    • SHA512

      2c260ec97a0f2f1793219a416aa81148215f59a22b15f21919386a6b2d65a32b6e808fc92ae06e52e12571a4c9eab8d26e599e19c2608b49f0b0de2490abcae9

    • SSDEEP

      98304:qcrzBGT5mzEG0tQBSXPjG3XZ+YV/rAZFgl+Xxo3N4ZNGREW8SD1:SMz6QBy7GHJ/rGecNGRbTD1

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

MITRE ATT&CK Mobile v15

Tasks