General
-
Target
81a8aa082b4ff194f7a77e294c22df5bb83cd43024e90fc7cfe9cde37b188b78.zip
-
Size
4.1MB
-
Sample
241223-vewz3avpgw
-
MD5
ef512eb46e975b4118a036ca3c413aa2
-
SHA1
5091109847d8923329c2a8de36ddc45ce5d2b953
-
SHA256
c35b1fad7a8c61f89d5385547ff5efceb2578796fb6b136a754fb5a2ad7f8443
-
SHA512
f632ad09e5de780035098776529ca682122b87f55ba38558951f26f48dc02f541e39fb13c81bde75dd95c31b9dda1cc5aeac2f893da0f6f036197ec6be858ea4
-
SSDEEP
98304:e8dQPaGUZ7sdtwu/6wIYQfaeuz1fEaPSXYlMv6txlrm341C5Mbsap:uPxUZ+tx/6wIYQCeuz1fMIlMv+m3N5y5
Behavioral task
behavioral1
Sample
81a8aa082b4ff194f7a77e294c22df5bb83cd43024e90fc7cfe9cde37b188b78.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral2
Sample
81a8aa082b4ff194f7a77e294c22df5bb83cd43024e90fc7cfe9cde37b188b78.apk
Resource
android-x86-arm-20240624-en
Malware Config
Extracted
furball
http://www.googleassisstants.com/mmh
Targets
-
-
Target
81a8aa082b4ff194f7a77e294c22df5bb83cd43024e90fc7cfe9cde37b188b78
-
Size
4.9MB
-
MD5
c65a69ba8afe5b4f80a04d26b8b6b78e
-
SHA1
0ab8a12c2dde9ac88e755a39fa6562bb423fb454
-
SHA256
81a8aa082b4ff194f7a77e294c22df5bb83cd43024e90fc7cfe9cde37b188b78
-
SHA512
8b587e133eacfc42e946d9e2c4c9195c1f8d2485c99ebe0ef3a45f7037d792eef7113d287ba242993f9ee68eb4aedc79d7d48881d88b841059fe902497c4574e
-
SSDEEP
98304:HPfQWnSNff2dCFZuM876xK9yx3qpA2DSaX+SAYLat7i0rJDi0:HAQv76oIx3qO2DeSAYLajh
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries the phone number (MSISDN for GSM devices)
-
Reads the contacts stored on the device.
-
Reads the content of the call log.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Foreground Persistence
1Virtualization/Sandbox Evasion
2System Checks
2Discovery
System Information Discovery
2System Network Configuration Discovery
4System Network Connections Discovery
1