1e724a5af76927106ee92421412af62698707d1d44a9891f91b3c6902f1780cd | Triage

Sharing

General

Target

1e724a5af76927106ee92421412af62698707d1d44a9891f91b3c6902f1780cd.apk
Size

8.4MB
Sample

250325-nf3exaynt3
MD5

689ec6a5d7ce2f763f163a429edf5504
SHA1

4b04cb90e3141a0060f98507fcd180cb68db0e0e
SHA256

1e724a5af76927106ee92421412af62698707d1d44a9891f91b3c6902f1780cd
SHA512

33730ff2403db5f60fd2ff9d4d2987a903d280892b8297ae8694a6e2eac9089285642be8218385e5a611ff273c7b5c23e1afa89ef170f7f722f015264b5a2f6b
SSDEEP

196608:1+97L8E4QzRu1gl22jAGYcvW0Whqvy0B7e8HBivRJcKQR4I976U:1KAE4QlzMivHKg7e8HBivR+dR4wT

Score

8^/10

android collection credential_access defense_evasion discovery evasion impact persistence

Malware Config

Targets

- Target
  
  1e724a5af76927106ee92421412af62698707d1d44a9891f91b3c6902f1780cd.apk
- Size
  
  8.4MB
- MD5
  
  689ec6a5d7ce2f763f163a429edf5504
- SHA1
  
  4b04cb90e3141a0060f98507fcd180cb68db0e0e
- SHA256
  
  1e724a5af76927106ee92421412af62698707d1d44a9891f91b3c6902f1780cd
- SHA512
  
  33730ff2403db5f60fd2ff9d4d2987a903d280892b8297ae8694a6e2eac9089285642be8218385e5a611ff273c7b5c23e1afa89ef170f7f722f015264b5a2f6b
- SSDEEP
  
  196608:1+97L8E4QzRu1gl22jAGYcvW0Whqvy0B7e8HBivRJcKQR4I976U:1KAE4QlzMivHKg7e8HBivR+dR4wT
Score

8^/10

defense_evasion discovery evasion impact persistence collection credential_access
- Checks if the Android device is rooted.
  defense_evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

Process Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Data Manipulation

Transmitted Data Manipulation

Tasks

static1

behavioral1

defense_evasiondiscoveryevasionimpactpersistence

behavioral2

collectioncredential_accessdefense_evasiondiscoveryevasionimpactpersistence

behavioral3

collectioncredential_accessdefense_evasiondiscoveryevasionimpact