General

  • Target

    A96D4C2D7ECAAAF99B8C045139555AEDAE62199D4F595D904C982738774CD8CF.apk

  • Size

    28.9MB

  • Sample

    250414-t6q3fstzg1

  • MD5

    e647ba625bab420ceb912af32459f039

  • SHA1

    bd09351d20c1058691823226cf4af06675af6530

  • SHA256

    a96d4c2d7ecaaaf99b8c045139555aedae62199d4f595d904c982738774cd8cf

  • SHA512

    7880b8fefb5e19cf6c51e71b40f7407e4c4c8ee21ffce2f02d7e7627f322d1ede13c944781a1e43cba6283c636582ca6c7e6ee8186f89467ab7d8d52aae4977a

  • SSDEEP

    786432:Ug2gvEd8aGYJrmsUsvsPmmgeAIqRvj3lX7tqr3G7E:UgbvSPGWjRvseKXu3lX7tmW7E

Malware Config

Targets

    • Target

      A96D4C2D7ECAAAF99B8C045139555AEDAE62199D4F595D904C982738774CD8CF.apk

    • Size

      28.9MB

    • MD5

      e647ba625bab420ceb912af32459f039

    • SHA1

      bd09351d20c1058691823226cf4af06675af6530

    • SHA256

      a96d4c2d7ecaaaf99b8c045139555aedae62199d4f595d904c982738774cd8cf

    • SHA512

      7880b8fefb5e19cf6c51e71b40f7407e4c4c8ee21ffce2f02d7e7627f322d1ede13c944781a1e43cba6283c636582ca6c7e6ee8186f89467ab7d8d52aae4977a

    • SSDEEP

      786432:Ug2gvEd8aGYJrmsUsvsPmmgeAIqRvj3lX7tqr3G7E:UgbvSPGWjRvseKXu3lX7tmW7E

    • Android SMSWorm payload

    • SMSWorm

      SMSWorm is an Android malware that can spread itself to a victim's contact list via SMS first seen in May 2021.

    • Smsworm family

    • Checks if the Android device is rooted.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Acquires the wake lock

    • Queries information about active data network

    • Checks the presence of a debugger

MITRE ATT&CK Mobile v16

Tasks