General

  • Target

    latamAirLines.apk

  • Size

    13.8MB

  • Sample

    241121-svd33stjc1

  • MD5

    be43b63adc4a9deba689f979b909e407

  • SHA1

    b54e24264838b58ef55cab0cba5a857b5ab9a45a

  • SHA256

    80c6c0ff281faa2a2e8fb07c4807006170ce4f1ca2404acd5fa3188e35f208ac

  • SHA512

    12d99024085db321f02bc234d07b33e4687bd8887e63bb89e3f1976c7d125cf436d520459048216862f977e06557336c302569595883fb246df7a4fdffcdd54f

  • SSDEEP

    393216:KRi7bzxXgHa4fODE6y6/4ZwiFFGJtXAwA51FktMgt:KR0qHqw6SadfFIFsM0

Malware Config

Targets

    • Target

      latamAirLines.apk

    • Size

      13.8MB

    • MD5

      be43b63adc4a9deba689f979b909e407

    • SHA1

      b54e24264838b58ef55cab0cba5a857b5ab9a45a

    • SHA256

      80c6c0ff281faa2a2e8fb07c4807006170ce4f1ca2404acd5fa3188e35f208ac

    • SHA512

      12d99024085db321f02bc234d07b33e4687bd8887e63bb89e3f1976c7d125cf436d520459048216862f977e06557336c302569595883fb246df7a4fdffcdd54f

    • SSDEEP

      393216:KRi7bzxXgHa4fODE6y6/4ZwiFFGJtXAwA51FktMgt:KR0qHqw6SadfFIFsM0

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about active data network

MITRE ATT&CK Mobile v15

Tasks