General

  • Target

    M-PAjk.apk

  • Size

    13.4MB

  • Sample

    241020-rl99gssekg

  • MD5

    5cf9e29ed6a288b19fe4acffd6a7d92a

  • SHA1

    6adf311afe41ee7901711f84009980ada1e4b51d

  • SHA256

    b5e92288918d78d298c10e37c871ec005c130d0607cfacb103ec0ca9b516af8d

  • SHA512

    229b961772258d99abd5925179ac394f8a032c9f025324930bdaa5e63a10dda14115c71f21407fd3888f50d5a94159eb5660a1cb4bb1d349c9f16159c9b28cac

  • SSDEEP

    196608:6CpN6uQHyaacuFxXBUJFy0KD6qpshO/ffTY8FxdrdIDJm4jJJ4Lp+0ZMgXth1x:VnmxqxXIYpzffTzFxdrdEMlMg/

Malware Config

Targets

    • Target

      M-PAjk.apk

    • Size

      13.4MB

    • MD5

      5cf9e29ed6a288b19fe4acffd6a7d92a

    • SHA1

      6adf311afe41ee7901711f84009980ada1e4b51d

    • SHA256

      b5e92288918d78d298c10e37c871ec005c130d0607cfacb103ec0ca9b516af8d

    • SHA512

      229b961772258d99abd5925179ac394f8a032c9f025324930bdaa5e63a10dda14115c71f21407fd3888f50d5a94159eb5660a1cb4bb1d349c9f16159c9b28cac

    • SSDEEP

      196608:6CpN6uQHyaacuFxXBUJFy0KD6qpshO/ffTY8FxdrdIDJm4jJJ4Lp+0ZMgXth1x:VnmxqxXIYpzffTzFxdrdEMlMg/

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about active data network

MITRE ATT&CK Mobile v15

Tasks