General
- Target 1faeeec49012ef73fbe7fabcb325b0b849f64a967c9d0d777c80da9870a34b70.apk
- Size 12.4MB
- Sample251202-ptcxvasra1
- SHA256 1faeeec49012ef73fbe7fabcb325b0b849f64a967c9d0d777c80da9870a34b70
- MD5 8a74dc7513885d24b8a01bdee0d08650
- SHA1 e35225677a122b461e4744bab27e2372c883b423
- SHA512 c2366b41e1b8c21987ad10719bc66a02363c25e2221c1f6f2103eb8474249292c5c1004e8f594af3c3b0de73c51a47a78308e614a819c66773864ab2d94756e1
- SSDEEP 98304:LmR6SFm2wrfqlHyfFVRrd2Zr8Sommw/gSfO+:LWwyOFfmrRW+
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
1faeeec49012ef73fbe7fabcb325b0b849f64a967c9d0d777c80da9870a34b70.apk
Resource
android-x86-arm-20250917-en
Behavioral task
behavioral2
Sample
1faeeec49012ef73fbe7fabcb325b0b849f64a967c9d0d777c80da9870a34b70.apk
Resource
android-x64-20250917-en
Behavioral task
behavioral3
Sample
1faeeec49012ef73fbe7fabcb325b0b849f64a967c9d0d777c80da9870a34b70.apk
Resource
android-x64-arm64-20250917-en
Malware Config
Extracted
-
bingomod
-
192.119.110.32
Targets
-
- Target 1faeeec49012ef73fbe7fabcb325b0b849f64a967c9d0d777c80da9870a34b70.apk
- Size 12.4MB
- SHA256 1faeeec49012ef73fbe7fabcb325b0b849f64a967c9d0d777c80da9870a34b70
- MD5 8a74dc7513885d24b8a01bdee0d08650
- SHA1 e35225677a122b461e4744bab27e2372c883b423
- SHA512 c2366b41e1b8c21987ad10719bc66a02363c25e2221c1f6f2103eb8474249292c5c1004e8f594af3c3b0de73c51a47a78308e614a819c66773864ab2d94756e1
- SSDEEP 98304:LmR6SFm2wrfqlHyfFVRrd2Zr8Sommw/gSfO+:LWwyOFfmrRW+
- MD5 SHA1 SHA512 SSDEEP
Bingomod family
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Acquires the wake lock
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
Queries the mobile country code (MCC)
Requests disabling of battery optimizations (often used to enable hiding in the background).
Requests modifying system settings.
MITRE ATT&CK Mobile v16
Defense Evasion
Hide Artifacts
1User Evasion
1Impair Defenses
1Prevent Application Removal
1Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Credential Access
Clipboard Data
1Input Capture
2GUI Input Capture
1Keylogging
1