General

  • Target

    Ahmyth-aligned-debugSigned.apk

  • Size

    293KB

  • Sample

    250325-dpyszatlx9

  • MD5

    df02fae3a0898058ec5aebd5c347df3f

  • SHA1

    e1b35ef760d9500a994bb95ef372be959f1bd095

  • SHA256

    45b88d16392a817b6a09a00492f7290fab3b73a6d5e896292af5307953f165c7

  • SHA512

    d408b2d616ce816bb6c24bc77c3a9e5f97c50762123f2824ffea3210b607dc6e9bbdbf0e988dbc3cec8c304321c22a3a0f447e64bc9c0d44bd5d9a128904875e

  • SSDEEP

    3072:oZeJmmaGOrkq72nb/Un0t2mFi9mp/t0uLL4Xa/G5O5oJ5aAXG1Zja7efy0g14Zu0:okJmmaHrSnbjLTo8Gn5bWPCDDL5feB

Malware Config

Extracted

Family

ahmyth

C2

http://147.185.221.17:25603

Targets

    • Target

      Ahmyth-aligned-debugSigned.apk

    • Size

      293KB

    • MD5

      df02fae3a0898058ec5aebd5c347df3f

    • SHA1

      e1b35ef760d9500a994bb95ef372be959f1bd095

    • SHA256

      45b88d16392a817b6a09a00492f7290fab3b73a6d5e896292af5307953f165c7

    • SHA512

      d408b2d616ce816bb6c24bc77c3a9e5f97c50762123f2824ffea3210b607dc6e9bbdbf0e988dbc3cec8c304321c22a3a0f447e64bc9c0d44bd5d9a128904875e

    • SSDEEP

      3072:oZeJmmaGOrkq72nb/Un0t2mFi9mp/t0uLL4Xa/G5O5oJ5aAXG1Zja7efy0g14Zu0:okJmmaHrSnbjLTo8Gn5bWPCDDL5feB

    • Reads the content of SMS inbox messages.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

MITRE ATT&CK Mobile v15

Tasks