General
-
Target
promo.apk
-
Size
12.1MB
-
Sample
250404-kbf5bss1ay
-
MD5
3f2506a80d5065e2d545899500e447fc
-
SHA1
a3718e2fdfb21896e1c20ed5d13b9faf0a63f699
-
SHA256
84421ce74388dc68fdb45dfcf8420910991e829b69ace11a6c70e0507163f2ff
-
SHA512
9fb52c9c25097751d852e380964102e9de2c8a8de62d13ef921bcf6ec31eff38da7f6d32e1b340212a76b66f38e9c1adc66efef3e018aae0e6630cd08bbc028b
-
SSDEEP
196608:E0ER65tEBBDjodumjbdvgdjr7+2LOD3+FHr2p9LvDEcGnWwpcKMKBYv:c6XEvDW3dvv2LOjQHip9Lv6nVTZ6v
Behavioral task
behavioral1
Sample
promo.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
promo.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
promo.apk
Resource
android-x64-arm64-20240910-en
Malware Config
Extracted
spynote
194.233.75.233:3335
Targets
-
-
Target
promo.apk
-
Size
12.1MB
-
MD5
3f2506a80d5065e2d545899500e447fc
-
SHA1
a3718e2fdfb21896e1c20ed5d13b9faf0a63f699
-
SHA256
84421ce74388dc68fdb45dfcf8420910991e829b69ace11a6c70e0507163f2ff
-
SHA512
9fb52c9c25097751d852e380964102e9de2c8a8de62d13ef921bcf6ec31eff38da7f6d32e1b340212a76b66f38e9c1adc66efef3e018aae0e6630cd08bbc028b
-
SSDEEP
196608:E0ER65tEBBDjodumjbdvgdjr7+2LOD3+FHr2p9LvDEcGnWwpcKMKBYv:c6XEvDW3dvv2LOjQHip9Lv6nVTZ6v
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Scheduled Task/Job
1Defense Evasion
Foreground Persistence
1Hide Artifacts
1User Evasion
1Input Injection
1