Overview

overview

10

Static

static

10

dec84fd800...b5.apk

android-9-x86

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e3a9acd8db3297d904c6d9327bad7f60.bin

  • Size

    11.8MB

  • Sample

    241023-b7kb7avgld

  • MD5

    26e0cefb3148913c1b88426b3955de28

  • SHA1

    d6405cc9a19c2cbb940e4fadae063b144cb17c02

  • SHA256

    90733df0ad5a394fdbd4cabeb7a941de6ff8b97de5da89323d8c517c22172649

  • SHA512

    6508a86f7b5bfe178e37b180bc736f2307f47e95f0e522695ce9ebd0bef682c79163dabe5fa4ae2e952b3ec67c8e730c1ad19cfb4246f835b98808c9592d5495

  • SSDEEP

    196608:E2WabCc707iSw05xKyTwVBr/PCCH6iPuhnHYql8r7BZy0ZcaUWCZjBn7R1rjRDVZ:EOP+waxVTCrCCH6ionHYqlG7ykpUnxBB

Score
10/10
gigabudgolddiggerandroidcollectioncredential_accessdiscoveryevasionexecutionimpactpersistence

Malware Config

Targets

    • Target

      dec84fd80056bef9ded372a07fd51ec675d5726b7593b8eefbe91f7ad81b3db5.apk

    • Size

      13.4MB

    • MD5

      e3a9acd8db3297d904c6d9327bad7f60

    • SHA1

      27ee0e4d47fbe76ae7e6a02f04093c8b695cbcf7

    • SHA256

      dec84fd80056bef9ded372a07fd51ec675d5726b7593b8eefbe91f7ad81b3db5

    • SHA512

      e80c08b8e0f1e9ceffab87cb7218ba9d5aed8fe3587be14b657246e009e4baf2b833bc0a0ea36c961f05aa747d1857cb1aad6f8a0dd582e654fac7e2cf2f628e

    • SSDEEP

      196608:bNpN6u5P4f78uFxXVuUpHfa2w3a9wMAMb/Pvmz5K5WkbEwsQvK/dFteZNghSr7M:5n5OZxX1Sv3a9wMjvmz5SD4wG/gNgeQ

    Score
    7/10
    collectioncredential_accessdiscoveryevasionexecutionimpactpersistence

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

      collectionevasioncredential_access

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

      collection

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

      evasionpersistence

    • Queries information about active data network

      discovery
    behavioral1

MITRE ATT&CK Mobile v15

Tasks