Resubmissions

13/06/2025, 13:37

250613-qw645sam9t10

09/06/2025, 08:27

250609-kclq7sbp4t7

01/11/2024, 07:56

241101-js2xpaxjbw7

30/10/2024, 09:11

241030-k5n22aypbs7

General

  • Target
    certificado.apk
  • Size 17.9MB
  • Sample241101-js2xpaxjbw
  • SHA256 e9f2f6e47e071ed2a0df5c75e787b2512ba8a601e55c91ab49ea837fd7a0fc85
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      certificado.apk
    • Size 17.9MB
    • SHA256 e9f2f6e47e071ed2a0df5c75e787b2512ba8a601e55c91ab49ea837fd7a0fc85
    • MD5 SHA1 SHA512 SSDEEP
    Score
    6/10
    • Checks the application is allowed to request package installs through the package installer

      Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

    • Declares broadcast receivers with permission to handle system events

    • Declares services with permission to bind to the system

    • Requests dangerous framework permissions

    • Target
      update.apk
    • Size 8.1MB
    • SHA256 73e647287408b2d40f53791b8a387a2f7eb6b1bba1926276e032bf2833354cc4
    • MD5 SHA1 SHA512 SSDEEP
    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

    • Queries the mobile country code (MCC)

MITRE ATT&CK Mobile v15

Tasks