Overview

overview

10

Static

static

10

782c6b2dad...40.apk

android-9-x86

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8031c03fe33aafcba5e78ecead0af4e0.bin

  • Size

    11.8MB

  • Sample

    241023-bt6y2athph

  • MD5

    bda6a1b709cb35d1008ff5ecf7487e75

  • SHA1

    90244d791aa330a8cd36dfe4c04776ef06a52a80

  • SHA256

    8ad756b1de2e84f63a73947169687cf641714a6488c6682214f43589951a7364

  • SHA512

    eab6833b6f78ebf16c14da36423d940d38b81313a5313870640d719dbca4ed1d34fa8b3c8567494d94e9bf3bc03678345316d449a9e572368a6c97b3d7a3ea75

  • SSDEEP

    196608:gi7Wgua/w55xYwDIIxbPe6yOX/yIWyuh7vdwhqdqY6VKuOGpzCYi959h/8xWA:FChKgBQOX6+uhhIKQpzCLB/8xWA

Score
10/10
gigabudgolddiggerandroidcollectioncredential_accessdiscoveryevasionexecutionimpactpersistence

Malware Config

Targets

    • Target

      782c6b2dad7cfc1f731c41653427e4d47f78a87f0ebc7041a8cc810204494c40.apk

    • Size

      13.3MB

    • MD5

      8031c03fe33aafcba5e78ecead0af4e0

    • SHA1

      dc5b708c783f39c9b0af4962c7f4114207081321

    • SHA256

      782c6b2dad7cfc1f731c41653427e4d47f78a87f0ebc7041a8cc810204494c40

    • SHA512

      88dfe10ac77a9b975adf05c3c557cbbdbe99dd4ec256b8dd2ff7b75db2d1a389d5f8bd3820c193ce8d0f2bcd1f042a7b810ed8500b40761fac0184e269ca37b2

    • SSDEEP

      393216:znjCKxXXhp97Y68kPIAlcFgGKCE7KmDOgg:zG8hP8kQA6SKmDOJ

    Score
    7/10
    collectioncredential_accessdiscoveryevasionexecutionimpactpersistence

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

      collectionevasioncredential_access

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

      collection

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

      evasionpersistence

    • Queries information about active data network

      discovery
    behavioral1

MITRE ATT&CK Mobile v15

Tasks