General

  • Target
    com.adobe.reader_1921819312_apps.evozi.com.apk
  • Size 227.9MB
  • Sample241113-gnf4baxcmp
  • SHA256 6aeda4239d3ab2c205fe8e3efaa6e3f06459bddf713d361313bc5cfbbec1cfb2
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      com.adobe.reader_1921819312_apps.evozi.com.apk
    • Size 227.9MB
    • SHA256 6aeda4239d3ab2c205fe8e3efaa6e3f06459bddf713d361313bc5cfbbec1cfb2
    • MD5 SHA1 SHA512 SSDEEP
    • Checks if the Android device is rooted.

    • A potential corporate email address has been identified in the URL: 9E1005A551ED61CA0A490D45@AdobeOrg

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Acquires the wake lock

    • Queries information about active data network

    • Checks the presence of a debugger

MITRE ATT&CK Mobile v15

Tasks