General

  • Target

    appbnl.apk

  • Size

    4.5MB

  • Sample

    241118-sg67psygja

  • MD5

    e3206520c98f993d5a3096fa88fe5ebb

  • SHA1

    87a521d5f62610d2f87b733e72f7d646ee8980cb

  • SHA256

    9f693923e5641c046bdcadf10b4e2b553d078b98afc2e30f2d72660b1e0161ed

  • SHA512

    49fd1d3ce6dbca6728b8c3169be53522259b1642067130964fa33d613602466d4ba323a002aea8935e84a08d6298981243803a5e750217ed169cd6334e643fcc

  • SSDEEP

    98304:yr0OhinKhin6ShinphinxuhinFhinrhinPhin7+JgBK7GDabqcqNjVl:1gCMC6kCHCxACTCFCZC7+JgwCDa2dNjH

Malware Config

Targets

    • Target

      appbnl.apk

    • Size

      4.5MB

    • MD5

      e3206520c98f993d5a3096fa88fe5ebb

    • SHA1

      87a521d5f62610d2f87b733e72f7d646ee8980cb

    • SHA256

      9f693923e5641c046bdcadf10b4e2b553d078b98afc2e30f2d72660b1e0161ed

    • SHA512

      49fd1d3ce6dbca6728b8c3169be53522259b1642067130964fa33d613602466d4ba323a002aea8935e84a08d6298981243803a5e750217ed169cd6334e643fcc

    • SSDEEP

      98304:yr0OhinKhin6ShinphinxuhinFhinrhinPhin7+JgBK7GDabqcqNjVl:1gCMC6kCHCxACTCFCZC7+JgwCDa2dNjH

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

    • Queries the mobile country code (MCC)

MITRE ATT&CK Mobile v15

Tasks