Resubmissions

06/05/2026, 14:27

260506-rsvglsg16k10

04/02/2026, 12:14

260204-pebq8shy7d10

04/02/2026, 12:02

260204-n7zhbshw3d10

General

  • Target
    service_pack.apk
  • Size 7.6MB
  • Sample260506-rsvglsg16k
  • SHA256 f35edc7cbdc033bd72ce693e468b6c1321b251dd8124c1e234a0a106fe679ead
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      service_pack.apk
    • Size 7.6MB
    • SHA256 f35edc7cbdc033bd72ce693e468b6c1321b251dd8124c1e234a0a106fe679ead
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: BingoMod

      BingoMod is an Android RAT first seen in May 2024.

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Acquires the wake lock

    • Requests allowing to install additional applications from unknown sources.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

    • Requests modifying system settings.

    • Target
      alaonop.apk
    • Size 1018KB
    • SHA256 fa9581dc4ba33fd441e3d085d590419ee37816e6f58b2da84286a0dc4c0f49e0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      pelota.apk
    • Size 1.1MB
    • SHA256 6e8f1285d52df2e588975fea56486514bed1db01beaaacec9abdac98c2921fc8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Mobile v16

Tasks