General

  • Target

    38117f3578f5209866c8723393dc77a0.apk

  • Size

    8.2MB

  • Sample

    241121-nfrcmswmcq

  • MD5

    38117f3578f5209866c8723393dc77a0

  • SHA1

    bd6e74e4f33a920dbb24a6ec36820b3a09a4c541

  • SHA256

    665c5e3934ad0d833409c3a62a8cda70e665b6adadc6617048268ad9193c299d

  • SHA512

    935814f17306d394f551a8d540bb8d1a1d49ca93b5d2f988dc1d72b79efb6578fb23cdd84dd6e7b00debbd78f740c0cf279f3568a64b28ae9bbb302587d8c023

  • SSDEEP

    196608:7h4bsDIAqDmIhmrCh0UcLpuLqp8IwcFyWX5DJDiDXD7DCsDADTDh29:7h44DADPoO0umqYZX1lmTfpUHE9

Malware Config

Targets

    • Target

      38117f3578f5209866c8723393dc77a0.apk

    • Size

      8.2MB

    • MD5

      38117f3578f5209866c8723393dc77a0

    • SHA1

      bd6e74e4f33a920dbb24a6ec36820b3a09a4c541

    • SHA256

      665c5e3934ad0d833409c3a62a8cda70e665b6adadc6617048268ad9193c299d

    • SHA512

      935814f17306d394f551a8d540bb8d1a1d49ca93b5d2f988dc1d72b79efb6578fb23cdd84dd6e7b00debbd78f740c0cf279f3568a64b28ae9bbb302587d8c023

    • SSDEEP

      196608:7h4bsDIAqDmIhmrCh0UcLpuLqp8IwcFyWX5DJDiDXD7DCsDADTDh29:7h44DADPoO0umqYZX1lmTfpUHE9

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the mobile country code (MCC)

MITRE ATT&CK Mobile v15

Tasks