General

  • Target
    stripchat.apk
  • Size 9.5MB
  • Sample260604-pmxnnsfx8r
  • SHA256 2f04017be2fa4574d735a65528a72d3d50a0b50a64354a7040486fcf513416ff
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      stripchat.apk
    • Size 9.5MB
    • SHA256 2f04017be2fa4574d735a65528a72d3d50a0b50a64354a7040486fcf513416ff
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Attempts to obfuscate APK file format

      Applies obfuscation techniques to the APK format in order to hinder analysis

    • Checks the application is allowed to request package installs through the package installer

      Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

    • Queries the mobile country code (MCC)

MITRE ATT&CK Mobile v16

Tasks