General

  • Target

    MiBBVA.apk

  • Size

    8.2MB

  • Sample

    241119-l6fmqatpa1

  • MD5

    cf9e6e98b39d33e2d9456b0766a3dfd3

  • SHA1

    232c1c34bfe621cfdd6522db750ac5e87866d5e7

  • SHA256

    ae782e7fa96c188714de04474667c09a9990b7db1017c98ec77838e45ada518b

  • SHA512

    dda6c86acc71988dc3b16f593ecb60dd08f5cf304987347e66d08d5657c40f8ea057178b88a38d031ceb18153c45007345e2f6eb5531588d2c309fe5efc4d60e

  • SSDEEP

    196608:xx3Lb5BMLCFjDUcLpuLqp8IwcFyWn8jDSDtDYDQDCjD3DgDB96:xZtmCFjDumqYZn02B8E2z076

Malware Config

Targets

    • Target

      MiBBVA.apk

    • Size

      8.2MB

    • MD5

      cf9e6e98b39d33e2d9456b0766a3dfd3

    • SHA1

      232c1c34bfe621cfdd6522db750ac5e87866d5e7

    • SHA256

      ae782e7fa96c188714de04474667c09a9990b7db1017c98ec77838e45ada518b

    • SHA512

      dda6c86acc71988dc3b16f593ecb60dd08f5cf304987347e66d08d5657c40f8ea057178b88a38d031ceb18153c45007345e2f6eb5531588d2c309fe5efc4d60e

    • SSDEEP

      196608:xx3Lb5BMLCFjDUcLpuLqp8IwcFyWn8jDSDtDYDQDCjD3DgDB96:xZtmCFjDumqYZn02B8E2z076

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

    • Queries the mobile country code (MCC)

    • Requests accessing notifications (often used to intercept notifications before users become aware).

MITRE ATT&CK Mobile v15

Tasks