General
-
Target
Sliv Filmov 2024 (2).apk
-
Size
3.8MB
-
Sample
241030-3e5k7stelq
-
MD5
1b872894fae0b278e8dbfc86b561a195
-
SHA1
31a05bbb9e62a410206d4c3a0d7fd82099e7c48a
-
SHA256
7f2468ce973bfb603e981c0568bff9b836d43498f6293fd500878c541401aa88
-
SHA512
92367c2a1565fe1809c4125f0e3385d5cf4468987dcc8cdfabb3fa94691ee8fcd75b6be40d74a31326abe90e26b189f924e6b39cd7d78a2d5e4acecfea331fc6
-
SSDEEP
98304:WW7DazdCHPUVJU0UQIQtQCUmzhzBmT80tZFM9I0P:WWvoVUhQtrTz6Ps9N
Behavioral task
behavioral1
Sample
Sliv Filmov 2024 (2).apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
Sliv Filmov 2024 (2).apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
Sliv Filmov 2024 (2).apk
Resource
android-x64-arm64-20240624-en
Malware Config
Extracted
spynote
51.132.229.252:7771
Targets
-
-
Target
Sliv Filmov 2024 (2).apk
-
Size
3.8MB
-
MD5
1b872894fae0b278e8dbfc86b561a195
-
SHA1
31a05bbb9e62a410206d4c3a0d7fd82099e7c48a
-
SHA256
7f2468ce973bfb603e981c0568bff9b836d43498f6293fd500878c541401aa88
-
SHA512
92367c2a1565fe1809c4125f0e3385d5cf4468987dcc8cdfabb3fa94691ee8fcd75b6be40d74a31326abe90e26b189f924e6b39cd7d78a2d5e4acecfea331fc6
-
SSDEEP
98304:WW7DazdCHPUVJU0UQIQtQCUmzhzBmT80tZFM9I0P:WWvoVUhQtrTz6Ps9N
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
-
Queries information about active data network
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Scheduled Task/Job
1Defense Evasion
Foreground Persistence
1Hide Artifacts
1User Evasion
1Impair Defenses
1Prevent Application Removal
1Input Injection
1Discovery
Software Discovery
1Security Software Discovery
1System Network Connections Discovery
1