General

  • Target
    rl_8b31874073fd9d5810247aea86d29dd37057cf23dd62c4e8c8bca5a483e65c0f
  • Size 22.2MB
  • Sample250702-webvkagj2z
  • SHA256 8b31874073fd9d5810247aea86d29dd37057cf23dd62c4e8c8bca5a483e65c0f
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • bingomod

C2
  • 104.168.143.135

Targets

    • Target
      rl_8b31874073fd9d5810247aea86d29dd37057cf23dd62c4e8c8bca5a483e65c0f
    • Size 22.2MB
    • SHA256 8b31874073fd9d5810247aea86d29dd37057cf23dd62c4e8c8bca5a483e65c0f
    • MD5 SHA1 SHA512 SSDEEP
    • BingoMod

      BingoMod is an Android RAT first seen in May 2024.

    • Bingomod family

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Acquires the wake lock

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

    • Queries the mobile country code (MCC)

    • Requests allowing to install additional applications from unknown sources.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

    • Requests modifying system settings.

    • Target
      bnl.apk
    • Size 5.2MB
    • SHA256 90b8cf2581f3c10280f6351a101855b15e19ac3045e6a758a03d57719298d105
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      hibank.apk
    • Size 5.1MB
    • SHA256 8d5422d1756415d0cc6a087870f46f9e8f4290ee681a48700a702da38d7806c3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10

MITRE ATT&CK Mobile v16

Tasks