General

  • Target
    54c0d385708e9e2e301dbbfbf3314572.apk
  • Size 22.2MB
  • Sample250326-nwxvcssxax
  • SHA256 9806aa8d59305ff473afe5f6ecd08c662cd33c4eba714f6b9d96c6ae1c73ccb6
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • bingomod

C2
  • 104.168.135.95

Targets

    • Target
      54c0d385708e9e2e301dbbfbf3314572.apk
    • Size 22.2MB
    • SHA256 9806aa8d59305ff473afe5f6ecd08c662cd33c4eba714f6b9d96c6ae1c73ccb6
    • MD5 SHA1 SHA512 SSDEEP
    • BingoMod

      BingoMod is an Android RAT first seen in May 2024.

    • Bingomod family

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Acquires the wake lock

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

    • Queries the mobile country code (MCC)

    • Requests allowing to install additional applications from unknown sources.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

    • Requests modifying system settings.

    • Target
      bnl.apk
    • Size 5.2MB
    • SHA256 90b8cf2581f3c10280f6351a101855b15e19ac3045e6a758a03d57719298d105
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      hibank.apk
    • Size 5.1MB
    • SHA256 8d5422d1756415d0cc6a087870f46f9e8f4290ee681a48700a702da38d7806c3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10

MITRE ATT&CK Mobile v15

Tasks