General

  • Target
    sample
  • Size 5.1MB
  • Sample251225-pbq2rawnft
  • SHA256 a0c9d6eb1932c96a11301c00cf96ce9767fb11401e090f215f972df06b09a878
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • albiriox

C2
  • 194.32.79.94:5555

Targets

    • Target
      sample
    • Size 5.1MB
    • SHA256 a0c9d6eb1932c96a11301c00cf96ce9767fb11401e090f215f972df06b09a878
    • MD5 SHA1 SHA512 SSDEEP
    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Mobile v16

Tasks