General

  • Target

    M-Pajak.apk

  • Size

    13.0MB

  • Sample

    241021-snrqlazejp

  • MD5

    ec05e3c8455f7d39c4c7540e5a402a5b

  • SHA1

    522e3031d8aa2bbd69469301ea1dbafcb89c9412

  • SHA256

    c885e45ba897c999ae3291c8314d94365db1f466ec2ff3f501e996762b74371e

  • SHA512

    b1b1390ebff758d2284671f21ac0d16d252b4ee542c073704412e0b29532947ee30f58707084bf6f97dcfedd68f8df85c989c8b24887fb7d01eb095a5b784144

  • SSDEEP

    196608:3pN6uNxK7VmWuFxX+uUBeVG/5OQ0x6JEDgNtcC0CMRalk4iCP8MMIINO5asobgW5:3nMV+xXXrx6xAC0C/78JIOOdobgahN

Malware Config

Targets

    • Target

      M-Pajak.apk

    • Size

      13.0MB

    • MD5

      ec05e3c8455f7d39c4c7540e5a402a5b

    • SHA1

      522e3031d8aa2bbd69469301ea1dbafcb89c9412

    • SHA256

      c885e45ba897c999ae3291c8314d94365db1f466ec2ff3f501e996762b74371e

    • SHA512

      b1b1390ebff758d2284671f21ac0d16d252b4ee542c073704412e0b29532947ee30f58707084bf6f97dcfedd68f8df85c989c8b24887fb7d01eb095a5b784144

    • SSDEEP

      196608:3pN6uNxK7VmWuFxX+uUBeVG/5OQ0x6JEDgNtcC0CMRalk4iCP8MMIINO5asobgW5:3nMV+xXXrx6xAC0C/78JIOOdobgahN

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about active data network

MITRE ATT&CK Mobile v15

Tasks