General
- Target 30a5c763921dd716f4ec0e1d911371ac176807d98d92a775139629551137a0e0.bin
- Size 4.2MB
- Sample250825-1986rsssev
- SHA256 30a5c763921dd716f4ec0e1d911371ac176807d98d92a775139629551137a0e0
- MD5 bb18503c5386269ea5eee63734f21b9a
- SHA1 f54df19fdb0e1bf7e1547630db1bc4a44a37ff96
- SHA512 c1f4799232537eef52b13c2b2973c2a19f86df39c5f4c44315d227b83a3f63cb1cf8ebfba7609633cb4f72d2d221d8b9ed0f665a63896215647f7107f0356b5f
- SSDEEP 98304:uoTYrVJR92cMCBR1iAHOmr2H5FmxVlFO7ta6HYIZg:RpQ1iAuJH5QxVga64IZg
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
30a5c763921dd716f4ec0e1d911371ac176807d98d92a775139629551137a0e0.apk
Resource
android-x86-arm-20250619-en
Behavioral task
behavioral2
Sample
30a5c763921dd716f4ec0e1d911371ac176807d98d92a775139629551137a0e0.apk
Resource
android-x64-20250619-en
Behavioral task
behavioral3
Sample
30a5c763921dd716f4ec0e1d911371ac176807d98d92a775139629551137a0e0.apk
Resource
android-x64-arm64-20250619-en
Malware Config
Targets
-
- Target 30a5c763921dd716f4ec0e1d911371ac176807d98d92a775139629551137a0e0.bin
- Size 4.2MB
- SHA256 30a5c763921dd716f4ec0e1d911371ac176807d98d92a775139629551137a0e0
- MD5 bb18503c5386269ea5eee63734f21b9a
- SHA1 f54df19fdb0e1bf7e1547630db1bc4a44a37ff96
- SHA512 c1f4799232537eef52b13c2b2973c2a19f86df39c5f4c44315d227b83a3f63cb1cf8ebfba7609633cb4f72d2d221d8b9ed0f665a63896215647f7107f0356b5f
- SSDEEP 98304:uoTYrVJR92cMCBR1iAHOmr2H5FmxVlFO7ta6HYIZg:RpQ1iAuJH5QxVga64IZg
- MD5 SHA1 SHA512 SSDEEP
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Scheduled Task/Job
1Defense Evasion
Foreground Persistence
1Impair Defenses
1Prevent Application Removal
1Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Credential Access
Clipboard Data
1Input Capture
2GUI Input Capture
1Keylogging
1Discovery
System Information Discovery
2System Network Configuration Discovery
1System Network Connections Discovery
1