General

  • Target

    PLN1.apk

  • Size

    13.0MB

  • Sample

    241103-15mf7svnbw

  • MD5

    4ed83b46aceb45290590dee6cf01be8d

  • SHA1

    655b1aabaeeda8d735c6cf8a14ccefce91a4ea2e

  • SHA256

    f0200ae0ef7e309b4cab5878ddddaed8f1440d203a8af7cdfffea0b90ac13c98

  • SHA512

    2928c1350f17193e659e035b311a5b9a2052480f0ef8207e1947bacb3d66e8ee5d439bf85be67468a618d1028ce42237db429b6531930c4e143858b7cca5564e

  • SSDEEP

    393216:vWcxX6fA+hZl6WDIxNmq3VvSvGK3OHrJgp:Ok+hZlbDaNvKvf3ErJi

Malware Config

Targets

    • Target

      PLN1.apk

    • Size

      13.0MB

    • MD5

      4ed83b46aceb45290590dee6cf01be8d

    • SHA1

      655b1aabaeeda8d735c6cf8a14ccefce91a4ea2e

    • SHA256

      f0200ae0ef7e309b4cab5878ddddaed8f1440d203a8af7cdfffea0b90ac13c98

    • SHA512

      2928c1350f17193e659e035b311a5b9a2052480f0ef8207e1947bacb3d66e8ee5d439bf85be67468a618d1028ce42237db429b6531930c4e143858b7cca5564e

    • SSDEEP

      393216:vWcxX6fA+hZl6WDIxNmq3VvSvGK3OHrJgp:Ok+hZlbDaNvKvf3ErJi

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about active data network

MITRE ATT&CK Mobile v15

Tasks