Resubmissions
24-01-2025 17:15
250124-vss6bszqen 10General
-
Target
ElectrcityBill..apk
-
Size
9.3MB
-
Sample
250124-vss6bszqen
-
MD5
907434d11e388b7da1ab4d0ab93575b6
-
SHA1
2f87e126ca47e80a869e1d75e835b74409110312
-
SHA256
5f9af1616c9ce1d45c69a7c9d20c20d9baad07bdb4500dea5a98c706be92824b
-
SHA512
9d3abc931b44d250c27ebd12cd66f3ad236c7a21ee8f327121bde3de1c1da0aa01ac7d53cecf45f43d9fb0e84479fc3058ae7fad01a113a5c9356f308ff07fc1
-
SSDEEP
98304:2ezBuT0mz+030tDFPZRYfQ9vmCkPH2t7lOOj1Qxq4j:+zz+bDFRRN9aPWxl+z
Malware Config
Targets
-
-
Target
ElectrcityBill..apk
-
Size
9.3MB
-
MD5
907434d11e388b7da1ab4d0ab93575b6
-
SHA1
2f87e126ca47e80a869e1d75e835b74409110312
-
SHA256
5f9af1616c9ce1d45c69a7c9d20c20d9baad07bdb4500dea5a98c706be92824b
-
SHA512
9d3abc931b44d250c27ebd12cd66f3ad236c7a21ee8f327121bde3de1c1da0aa01ac7d53cecf45f43d9fb0e84479fc3058ae7fad01a113a5c9356f308ff07fc1
-
SSDEEP
98304:2ezBuT0mz+030tDFPZRYfQ9vmCkPH2t7lOOj1Qxq4j:+zz+bDFRRN9aPWxl+z
Score7/10-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-