Resubmissions

08/06/2026, 18:07

260608-wqbc6sc12y

08/06/2026, 18:06

260608-wprc1acz9z10

04/06/2026, 15:24

260604-std2pahw6t10

General

  • Target
    38b51da971fcdea464793f752f538cb958661eca6af7706abedbc939ba35daf8
  • Size 753KB
  • Sample260604-std2pahw6t
  • SHA256 38b51da971fcdea464793f752f538cb958661eca6af7706abedbc939ba35daf8
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      050cdaa79d05ba3be02652cfec893d3c4d8cc4af9f3808682e6371fc7f1cf128
    • Size 786KB
    • SHA256 050cdaa79d05ba3be02652cfec893d3c4d8cc4af9f3808682e6371fc7f1cf128
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Android BADBOX payload

    • Family: BADBOX

      BADBOX is an Android botnet that targets Android TV devices.

    • Checks if the Android device is rooted.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the unique device ID (IMEI, MEID, IMSI)

MITRE ATT&CK Mobile v16

Tasks