General

  • Target

    epointevn.apk

  • Size

    9.5MB

  • Sample

    241221-m2tjfsykc1

  • MD5

    d01fb368fde611624b442937b0ea21f7

  • SHA1

    f82d1cac49a0dd7e8714fc6a0bc4d74473c97c10

  • SHA256

    dcf5e261143d0f9f95bab39a037cafdcfbc32aafe574f4fdd2a4844e72976545

  • SHA512

    476e61de68dd64477a1449db51646ae0e6b9b0c5f9d95ceed491d51975b602a771c17ad2bc7c374420990a71db988432fbaec97d3a99e26449df47f0b17f51ef

  • SSDEEP

    98304:XKL5O5Pudk+nD+2R456BjII/D1vybK9aj+sr/mzEwzBOT00tEEnu:XldujDXu56nDX9ajvruzEdnM

Malware Config

Targets

    • Target

      epointevn.apk

    • Size

      9.5MB

    • MD5

      d01fb368fde611624b442937b0ea21f7

    • SHA1

      f82d1cac49a0dd7e8714fc6a0bc4d74473c97c10

    • SHA256

      dcf5e261143d0f9f95bab39a037cafdcfbc32aafe574f4fdd2a4844e72976545

    • SHA512

      476e61de68dd64477a1449db51646ae0e6b9b0c5f9d95ceed491d51975b602a771c17ad2bc7c374420990a71db988432fbaec97d3a99e26449df47f0b17f51ef

    • SSDEEP

      98304:XKL5O5Pudk+nD+2R456BjII/D1vybK9aj+sr/mzEwzBOT00tEEnu:XldujDXu56nDX9ajvruzEdnM

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

MITRE ATT&CK Mobile v15

Tasks