General

  • Target

    Avastavv.apk

  • Size

    38.6MB

  • Sample

    241217-qzn3qszrax

  • MD5

    214aad6338d607df7ec75a2c48af09d5

  • SHA1

    490f2ee9b703feefbe0c68c3cc41542344f8fec8

  • SHA256

    94a3b1fc830323234f5ac6e69cf0840507c23e15bee5c8c3aa86fddaf61ef8b1

  • SHA512

    f2b671a907c95c3447811a8f9faaed5ff539f4937a1374d69fc97f884a1b4aad147e8efd355c4095a67a72b2ba6d245cd66045f4855c31795655df8d750ba8f0

  • SSDEEP

    98304:2xWWl1RWzO+9yUc+fDsoknx4wiG/xVWVmzxzBQT20txHHfQ:2xFl1RWq+91c+fIp7iGCYzo9q

Malware Config

Targets

    • Target

      Avastavv.apk

    • Size

      38.6MB

    • MD5

      214aad6338d607df7ec75a2c48af09d5

    • SHA1

      490f2ee9b703feefbe0c68c3cc41542344f8fec8

    • SHA256

      94a3b1fc830323234f5ac6e69cf0840507c23e15bee5c8c3aa86fddaf61ef8b1

    • SHA512

      f2b671a907c95c3447811a8f9faaed5ff539f4937a1374d69fc97f884a1b4aad147e8efd355c4095a67a72b2ba6d245cd66045f4855c31795655df8d750ba8f0

    • SSDEEP

      98304:2xWWl1RWzO+9yUc+fDsoknx4wiG/xVWVmzxzBQT20txHHfQ:2xFl1RWq+91c+fIp7iGCYzo9q

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Requests enabling of the accessibility settings.

MITRE ATT&CK Mobile v15

Tasks