General
-
Target
MiBBVA.apk
-
Size
8.2MB
-
Sample
241119-l6fmqatpa1
-
MD5
cf9e6e98b39d33e2d9456b0766a3dfd3
-
SHA1
232c1c34bfe621cfdd6522db750ac5e87866d5e7
-
SHA256
ae782e7fa96c188714de04474667c09a9990b7db1017c98ec77838e45ada518b
-
SHA512
dda6c86acc71988dc3b16f593ecb60dd08f5cf304987347e66d08d5657c40f8ea057178b88a38d031ceb18153c45007345e2f6eb5531588d2c309fe5efc4d60e
-
SSDEEP
196608:xx3Lb5BMLCFjDUcLpuLqp8IwcFyWn8jDSDtDYDQDCjD3DgDB96:xZtmCFjDumqYZn02B8E2z076
Behavioral task
behavioral1
Sample
MiBBVA.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
MiBBVA.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
MiBBVA.apk
Resource
android-x64-arm64-20240624-en
Malware Config
Targets
-
-
Target
MiBBVA.apk
-
Size
8.2MB
-
MD5
cf9e6e98b39d33e2d9456b0766a3dfd3
-
SHA1
232c1c34bfe621cfdd6522db750ac5e87866d5e7
-
SHA256
ae782e7fa96c188714de04474667c09a9990b7db1017c98ec77838e45ada518b
-
SHA512
dda6c86acc71988dc3b16f593ecb60dd08f5cf304987347e66d08d5657c40f8ea057178b88a38d031ceb18153c45007345e2f6eb5531588d2c309fe5efc4d60e
-
SSDEEP
196608:xx3Lb5BMLCFjDUcLpuLqp8IwcFyWn8jDSDtDYDQDCjD3DgDB96:xZtmCFjDumqYZn02B8E2z076
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
-
Queries the mobile country code (MCC)
-
Requests accessing notifications (often used to intercept notifications before users become aware).
-
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Foreground Persistence
1Impair Defenses
1Prevent Application Removal
1Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Credential Access
Access Notifications
1Clipboard Data
1Input Capture
2GUI Input Capture
1Keylogging
1