General

  • Target

    GetApps_35.6.1.0_apkcombo.com.apk

  • Size

    33.4MB

  • Sample

    241113-p3284asemn

  • MD5

    36dec34a8f805fadfea0b93d76ef9206

  • SHA1

    46c3ee7dd52d3a5eab239516cb0ecb9c819f68ed

  • SHA256

    de112869db60e4654c5bb7f7e5b5546dba0da72e9230d2f0a3db85c1597becd4

  • SHA512

    4f330010f91605aec441c7a9d685cf4981c60840327d512f695a098e5473054a32efdd51bef6be683b9f923e89acc701cec17b65565aa36e3dbf8221c9b394ab

  • SSDEEP

    786432:CvJTkw0iUrY86ZXTeydZ9HKl58rcc986yq6GVX:ilpaN6UUZu8ubSZ

Malware Config

Targets

    • Target

      GetApps_35.6.1.0_apkcombo.com.apk

    • Size

      33.4MB

    • MD5

      36dec34a8f805fadfea0b93d76ef9206

    • SHA1

      46c3ee7dd52d3a5eab239516cb0ecb9c819f68ed

    • SHA256

      de112869db60e4654c5bb7f7e5b5546dba0da72e9230d2f0a3db85c1597becd4

    • SHA512

      4f330010f91605aec441c7a9d685cf4981c60840327d512f695a098e5473054a32efdd51bef6be683b9f923e89acc701cec17b65565aa36e3dbf8221c9b394ab

    • SSDEEP

      786432:CvJTkw0iUrY86ZXTeydZ9HKl58rcc986yq6GVX:ilpaN6UUZu8ubSZ

    • Checks if the Android device is rooted.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about active data network

    • Checks the presence of a debugger

MITRE ATT&CK Mobile v15

Tasks