General
- Target peys.chat.apk
- Size 4.5MB
- Sample260612-wp4ckaay9w
- SHA256 849112703e7510f4d4213e2a424f7a755b39a453bcc31280bee37fb1589ab4da
- MD5 0fabdb6ea92744e0e5d370b9b67f1e48
- SHA1 2cd9d2907f65ee8d52bf5f3470ee736a608fabe2
- SHA512 2752386088b7321f0a54299c61e21a726c894fa96f21b5d828358f2ab463e8440b0857c11f25bb84d255ba58d49302f585c6471260357010efe9a035496dc0b5
- SSDEEP 98304:OG7eEigLj+u18limIxl9NahimzrzBDTF0twYP2JC:QgfHupyNqNz1a32C
- TLSH T1E5260203FB46D697D8AA83F27F230DA919134F18C642AAE304657A6D2D772C14DD7ACC
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
peys.chat.apk
Resource
android-x86-arm-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
peys.chat.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
peys.chat.apk
Resource
android-x64-arm64-20260325-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target peys.chat.apk
- Size 4.5MB
- SHA256 849112703e7510f4d4213e2a424f7a755b39a453bcc31280bee37fb1589ab4da
- MD5 0fabdb6ea92744e0e5d370b9b67f1e48
- SHA1 2cd9d2907f65ee8d52bf5f3470ee736a608fabe2
- SHA512 2752386088b7321f0a54299c61e21a726c894fa96f21b5d828358f2ab463e8440b0857c11f25bb84d255ba58d49302f585c6471260357010efe9a035496dc0b5
- SSDEEP 98304:OG7eEigLj+u18limIxl9NahimzrzBDTF0twYP2JC:QgfHupyNqNz1a32C
- TLSH T1E5260203FB46D697D8AA83F27F230DA919134F18C642AAE304657A6D2D772C14DD7ACC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests enabling of the accessibility settings.
MITRE ATT&CK Mobile v16
Tasks
static1
bankertrojaninfostealerratspynote
Score
10/10
behavioral1
bankercollectioncredential_accessdefense_evasiondiscoveryexecutionpersistence
Score
7/10
behavioral2
bankercollectioncredential_accessdefense_evasiondiscoveryexecutionpersistence
Score
7/10
behavioral3
bankercollectioncredential_accessdefense_evasiondiscoveryexecutionpersistence
Score
7/10