General
-
Target
latamAirLines.apk
-
Size
13.8MB
-
Sample
241105-llgpaaxrey
-
MD5
9f2af61449faf42d605e3936b4e8942e
-
SHA1
d3fb55c0dffdd78ab880aaffb341067d7a190d90
-
SHA256
cc366c3cb1c65f96a8fbf2b6c2d4d3e8787a77bdfb0e3d9413e5d8020cda9041
-
SHA512
3561a04acd7f8338439361615fcc9b107c5b0ec449d5a8997ca1579f8f40b8cf12671355baf677f137d9b66393d3ab738a72133ff53840b27e365a596515a2fe
-
SSDEEP
393216:J/i7bzxX/Hx8I/hTAUl42TduLUvpeO8SYYtMg/:J/05hWIzpP8sM0
Malware Config
Targets
-
-
Target
latamAirLines.apk
-
Size
13.8MB
-
MD5
9f2af61449faf42d605e3936b4e8942e
-
SHA1
d3fb55c0dffdd78ab880aaffb341067d7a190d90
-
SHA256
cc366c3cb1c65f96a8fbf2b6c2d4d3e8787a77bdfb0e3d9413e5d8020cda9041
-
SHA512
3561a04acd7f8338439361615fcc9b107c5b0ec449d5a8997ca1579f8f40b8cf12671355baf677f137d9b66393d3ab738a72133ff53840b27e365a596515a2fe
-
SSDEEP
393216:J/i7bzxX/Hx8I/hTAUl42TduLUvpeO8SYYtMg/:J/05hWIzpP8sM0
Score7/10-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-