General
-
Target
c7f1c45041e15266f830cbce16173b8215391162e18bbab0b07e336b1511f3f5.zip
-
Size
4.4MB
-
Sample
241106-d6y53atfrc
-
MD5
9e567a34934a60cb8874bf1e525fe00b
-
SHA1
d5f11cf62bed2ac2c4b9e60cad7c8011cb886a24
-
SHA256
c7f1c45041e15266f830cbce16173b8215391162e18bbab0b07e336b1511f3f5
-
SHA512
ef8f2f7fba2b6a6ca30de65ab7506d94902be8bcb56262a802289c05e698102dcf2e71629744b1a2f43cb21c024769d2f691fa0e8c3cb279834f02decfc202a6
-
SSDEEP
98304:WazBMT4mzE0V0tDVsQWtQ5xxUnoPlSq+hrOB1Mtgk:4HzERhlXxxOoPlN+hrA1Mtgk
Malware Config
Targets
-
-
Target
c7f1c45041e15266f830cbce16173b8215391162e18bbab0b07e336b1511f3f5.zip
-
Size
4.4MB
-
MD5
9e567a34934a60cb8874bf1e525fe00b
-
SHA1
d5f11cf62bed2ac2c4b9e60cad7c8011cb886a24
-
SHA256
c7f1c45041e15266f830cbce16173b8215391162e18bbab0b07e336b1511f3f5
-
SHA512
ef8f2f7fba2b6a6ca30de65ab7506d94902be8bcb56262a802289c05e698102dcf2e71629744b1a2f43cb21c024769d2f691fa0e8c3cb279834f02decfc202a6
-
SSDEEP
98304:WazBMT4mzE0V0tDVsQWtQ5xxUnoPlSq+hrOB1Mtgk:4HzERhlXxxOoPlN+hrA1Mtgk
Score7/10-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-