General

  • Target

    DichVuCong.apk

  • Size

    30.7MB

  • Sample

    241105-ktbbssyajg

  • MD5

    e047f809655bde32e54f60abe0cd4daa

  • SHA1

    6a81433ce13dc3452a1b8a5e7a31a4ebc47fc3bf

  • SHA256

    7b29ba118d71828583a912b9f9adcaa93eb99913aecfd1ff337373467acd832a

  • SHA512

    c00f69f48e26167dcba4172302f1e10ae6396e3825a25955132a438d44adb64c193ac6b10eed3f77e5cb372aca94e6a3483a8ceb40f51298fa669218486ac6cb

  • SSDEEP

    786432:6XP/HgWChTGIab0Vh4ksIDiXFqomopXftnZShYHIPNOTKOyR:6XPPgRsEhxjDeFqomYtZSh8I1LB

Malware Config

Targets

    • Target

      DichVuCong.apk

    • Size

      30.7MB

    • MD5

      e047f809655bde32e54f60abe0cd4daa

    • SHA1

      6a81433ce13dc3452a1b8a5e7a31a4ebc47fc3bf

    • SHA256

      7b29ba118d71828583a912b9f9adcaa93eb99913aecfd1ff337373467acd832a

    • SHA512

      c00f69f48e26167dcba4172302f1e10ae6396e3825a25955132a438d44adb64c193ac6b10eed3f77e5cb372aca94e6a3483a8ceb40f51298fa669218486ac6cb

    • SSDEEP

      786432:6XP/HgWChTGIab0Vh4ksIDiXFqomopXftnZShYHIPNOTKOyR:6XPPgRsEhxjDeFqomYtZSh8I1LB

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about active data network

MITRE ATT&CK Mobile v15

Tasks