General

  • Target

    81a8aa082b4ff194f7a77e294c22df5bb83cd43024e90fc7cfe9cde37b188b78.zip

  • Size

    4.1MB

  • Sample

    241223-vewz3avpgw

  • MD5

    ef512eb46e975b4118a036ca3c413aa2

  • SHA1

    5091109847d8923329c2a8de36ddc45ce5d2b953

  • SHA256

    c35b1fad7a8c61f89d5385547ff5efceb2578796fb6b136a754fb5a2ad7f8443

  • SHA512

    f632ad09e5de780035098776529ca682122b87f55ba38558951f26f48dc02f541e39fb13c81bde75dd95c31b9dda1cc5aeac2f893da0f6f036197ec6be858ea4

  • SSDEEP

    98304:e8dQPaGUZ7sdtwu/6wIYQfaeuz1fEaPSXYlMv6txlrm341C5Mbsap:uPxUZ+tx/6wIYQCeuz1fMIlMv+m3N5y5

Malware Config

Extracted

Family

furball

C2

http://www.googleassisstants.com/mmh

Targets

    • Target

      81a8aa082b4ff194f7a77e294c22df5bb83cd43024e90fc7cfe9cde37b188b78

    • Size

      4.9MB

    • MD5

      c65a69ba8afe5b4f80a04d26b8b6b78e

    • SHA1

      0ab8a12c2dde9ac88e755a39fa6562bb423fb454

    • SHA256

      81a8aa082b4ff194f7a77e294c22df5bb83cd43024e90fc7cfe9cde37b188b78

    • SHA512

      8b587e133eacfc42e946d9e2c4c9195c1f8d2485c99ebe0ef3a45f7037d792eef7113d287ba242993f9ee68eb4aedc79d7d48881d88b841059fe902497c4574e

    • SSDEEP

      98304:HPfQWnSNff2dCFZuM876xK9yx3qpA2DSaX+SAYLat7i0rJDi0:HAQv76oIx3qO2DeSAYLajh

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries account information for other applications stored on the device

      Application may abuse the framework's APIs to collect account information stored on the device.

    • Queries the phone number (MSISDN for GSM devices)

    • Reads the contacts stored on the device.

    • Reads the content of the call log.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about active data network

    • Queries the mobile country code (MCC)

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks