General
-
Target
Predator.apk
-
Size
8.5MB
-
Sample
241101-fyccfavqht
-
MD5
be3efd3f3fa862239c36e5f1314ecb22
-
SHA1
e28bc5dc50f06de1aa95c9b62f14426f17ec9c5e
-
SHA256
d2c2b10763c87c50ef37c323707edab8f9574df4ff5428db22e04dc161d1a175
-
SHA512
96bf81909489d9d34c78912ae5db604fc7391055cad31299c7ddfae7afb292e3418e4ae19ebea7b466d94a3101efc6372648f8cce4d60da22435d6803382c323
-
SSDEEP
49152:3uHu1fhWnH2/y3oibOoTCjXXKn9PV9AmzhzdGGuQTO0iU0Yq80cgp5RRoLG:3aOfhWHUookYjw99AmzhzBBT30tpaS
Behavioral task
behavioral1
Sample
Predator.apk
Resource
android-x64-arm64-20240624-en
Malware Config
Extracted
spynote
89.238.177.28:7744
Targets
-
-
Target
Predator.apk
-
Size
8.5MB
-
MD5
be3efd3f3fa862239c36e5f1314ecb22
-
SHA1
e28bc5dc50f06de1aa95c9b62f14426f17ec9c5e
-
SHA256
d2c2b10763c87c50ef37c323707edab8f9574df4ff5428db22e04dc161d1a175
-
SHA512
96bf81909489d9d34c78912ae5db604fc7391055cad31299c7ddfae7afb292e3418e4ae19ebea7b466d94a3101efc6372648f8cce4d60da22435d6803382c323
-
SSDEEP
49152:3uHu1fhWnH2/y3oibOoTCjXXKn9PV9AmzhzdGGuQTO0iU0Yq80cgp5RRoLG:3aOfhWHUookYjw99AmzhzBBT30tpaS
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-
MITRE ATT&CK Mobile v15
Defense Evasion
Foreground Persistence
1Hide Artifacts
2Suppress Application Icon
1User Evasion
1Impair Defenses
1Prevent Application Removal
1Input Injection
1