General

  • Target

    5089abac5b777e1d8f4ffacd20c8abbf991f1fa58bd77032d41adb7ab7ca209b.bin

  • Size

    4.9MB

  • Sample

    241104-123c9a1kdr

  • MD5

    1b7e5d7afd50c66eae8ea86d6876ba8f

  • SHA1

    184e30438952e88c33e4d2049feb84dd25324bd4

  • SHA256

    5089abac5b777e1d8f4ffacd20c8abbf991f1fa58bd77032d41adb7ab7ca209b

  • SHA512

    42d6db2c8022a1d9a68fc2802899385a8bd37c829410be660e6a7e0c60601ff4b4ff310a8e8d34ce202a4ca0df45ca0f60906368af1c5e9724411974ef03122e

  • SSDEEP

    98304:ri52DJwT1Iz8hT4dQOw38AufPm94tOArR1Y3RMGujqXsQ2lRtC8ZrhN+:ruOmx/4IsAuf+9s7rRKmGqsGlRtTZ9w

Malware Config

Targets

    • Target

      5089abac5b777e1d8f4ffacd20c8abbf991f1fa58bd77032d41adb7ab7ca209b.bin

    • Size

      4.9MB

    • MD5

      1b7e5d7afd50c66eae8ea86d6876ba8f

    • SHA1

      184e30438952e88c33e4d2049feb84dd25324bd4

    • SHA256

      5089abac5b777e1d8f4ffacd20c8abbf991f1fa58bd77032d41adb7ab7ca209b

    • SHA512

      42d6db2c8022a1d9a68fc2802899385a8bd37c829410be660e6a7e0c60601ff4b4ff310a8e8d34ce202a4ca0df45ca0f60906368af1c5e9724411974ef03122e

    • SSDEEP

      98304:ri52DJwT1Iz8hT4dQOw38AufPm94tOArR1Y3RMGujqXsQ2lRtC8ZrhN+:ruOmx/4IsAuf+9s7rRKmGqsGlRtTZ9w

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

    • Queries the phone number (MSISDN for GSM devices)

    • Reads the content of the SMS messages.

    • Reads the content of the call log.

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Mobile v15

Tasks