General

  • Target

    MPajak.apk

  • Size

    13.2MB

  • Sample

    241110-ma4v4stqfs

  • MD5

    ef3acd1a383c2f75bcb8fe7ed5f71c66

  • SHA1

    9f2a28c3c177fd5cb3e06976165c3691279eaa86

  • SHA256

    95b09b49f68c8173b98ca5ff4472c611b437181d809283d3fd046fb14943081e

  • SHA512

    9a80f23eb538763cd5ffdaac2bbbb912381a6b2d63f07f3b326728883c6d72f04f7e73fbe0c484431e9706d65cd0f0c892b78c4e4e8ecfa5426544ae21d0b722

  • SSDEEP

    393216:On5OZxXoyg7UhW1pRFioOOOJe8xhdBg39wd:OM4ySfknxzBS9wd

Malware Config

Targets

    • Target

      MPajak.apk

    • Size

      13.2MB

    • MD5

      ef3acd1a383c2f75bcb8fe7ed5f71c66

    • SHA1

      9f2a28c3c177fd5cb3e06976165c3691279eaa86

    • SHA256

      95b09b49f68c8173b98ca5ff4472c611b437181d809283d3fd046fb14943081e

    • SHA512

      9a80f23eb538763cd5ffdaac2bbbb912381a6b2d63f07f3b326728883c6d72f04f7e73fbe0c484431e9706d65cd0f0c892b78c4e4e8ecfa5426544ae21d0b722

    • SSDEEP

      393216:On5OZxXoyg7UhW1pRFioOOOJe8xhdBg39wd:OM4ySfknxzBS9wd

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about active data network

MITRE ATT&CK Mobile v15

Tasks