General

  • Target
    p39e9fd4a.pd495b67a.p5a772ade.apk
  • Size 22.4MB
  • Sample251021-apetbazmbr
  • SHA256 fa5c76a8b6a12f27e81140cd84b8d9a03658d4c6d78e11f2157831a74fc74b98
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • bingomod

C2
  • 192.119.111.208

Targets

    • Target
      p39e9fd4a.pd495b67a.p5a772ade.apk
    • Size 22.4MB
    • SHA256 fa5c76a8b6a12f27e81140cd84b8d9a03658d4c6d78e11f2157831a74fc74b98
    • MD5 SHA1 SHA512 SSDEEP
    • BingoMod

      BingoMod is an Android RAT first seen in May 2024.

    • Bingomod family

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Acquires the wake lock

    • Performs UI accessibility actions on behalf of the user

      Application may abuse the accessibility service to prevent their removal.

    • Queries the mobile country code (MCC)

    • Requests allowing to install additional applications from unknown sources.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

    • Requests modifying system settings.

    • Target
      bnl.apk
    • Size 5.2MB
    • SHA256 9a1ab6d4c419466c29732782781409af941473a1f866131d0f703186b53920f8
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      hibank.apk
    • Size 5.1MB
    • SHA256 8d5422d1756415d0cc6a087870f46f9e8f4290ee681a48700a702da38d7806c3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10

MITRE ATT&CK Mobile v16

Tasks