antidot | b4ed7eae643cea6f4087cd5b7187675cfe252d0f638657496458fc38b99d70cb | Triage

Sharing

General

Target

e718e9b1cf8c5f81f485022e44a8178ebf3aed62
Size

1.5MB
Sample

250211-r3125swqfq
MD5

80cd72c756b488b057157483bf4c89d3
SHA1

e718e9b1cf8c5f81f485022e44a8178ebf3aed62
SHA256

b4ed7eae643cea6f4087cd5b7187675cfe252d0f638657496458fc38b99d70cb
SHA512

22c97fb8b4894b7dc5668f4c2077704f516247eaf41a515af4f453643734d26231ddc07fa993da458fe6913c18025b9b69bbc13158b95681c9349edf9dc69b3e
SSDEEP

49152:HFCp6BL43YiKL/GtQnqahUaTcjLsV0tfRfVd+vdu:AWLNqCBTGU0B7Cdu

Score

10^/10

antidot android collection credential_access discovery impact persistence

Malware Config

Targets

- Target
  
  e718e9b1cf8c5f81f485022e44a8178ebf3aed62
- Size
  
  1.5MB
- MD5
  
  80cd72c756b488b057157483bf4c89d3
- SHA1
  
  e718e9b1cf8c5f81f485022e44a8178ebf3aed62
- SHA256
  
  b4ed7eae643cea6f4087cd5b7187675cfe252d0f638657496458fc38b99d70cb
- SHA512
  
  22c97fb8b4894b7dc5668f4c2077704f516247eaf41a515af4f453643734d26231ddc07fa993da458fe6913c18025b9b69bbc13158b95681c9349edf9dc69b3e
- SSDEEP
  
  49152:HFCp6BL43YiKL/GtQnqahUaTcjLsV0tfRfVd+vdu:AWLNqCBTGU0B7Cdu
Score

7^/10

discovery impact persistence collection credential_access
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Data Manipulation

Transmitted Data Manipulation

Tasks

static1

behavioral1

discoveryimpactpersistence

behavioral2

collectioncredential_accessdiscoveryimpactpersistence

behavioral3

collectioncredential_accessdiscoveryimpact