cc22b59fbd936bf998c538c722e1ea059a688e3cf7a2a383ddd3bfa4f3145b4c

Sharing

Copy URL Twitter E-mail

General

Target
MT Manager v2.26.7.apk
Size 30.0MB
Sample260703-vxnfmsc161
SHA256 cc22b59fbd936bf998c538c722e1ea059a688e3cf7a2a383ddd3bfa4f3145b4c
MD5 a2a017562af6f1a26b5003cb515a40a9
SHA1 8e919531246a76fa1084b9f7ac50892dbd35e21a
SHA512 cc682c99e5362937dba22a2473237dfc48c8cf893e7db706e0a27b21c85119bb1812e618cb22a4b6a3c1be5bd185a343cbd240d4c45afdb11bb392a883248a7a
SSDEEP 786432:9+mWHdCDlOoAhY5IWm3Ux2U8HXl8aoeyegjzxMxS9KMf:9+mWHdQlYh6IWqU0U836J3xMY9h
TLSH
T12E6723D0138914AFC532527B8C522B3B3AAB4CBD37A7531715543A2E28F76E44F6EAC4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  MT Manager v2.26.7.apk
- Size 30.0MB
- SHA256 cc22b59fbd936bf998c538c722e1ea059a688e3cf7a2a383ddd3bfa4f3145b4c
- MD5 a2a017562af6f1a26b5003cb515a40a9
- SHA1 8e919531246a76fa1084b9f7ac50892dbd35e21a
- SHA512 cc682c99e5362937dba22a2473237dfc48c8cf893e7db706e0a27b21c85119bb1812e618cb22a4b6a3c1be5bd185a343cbd240d4c45afdb11bb392a883248a7a
- SSDEEP 786432:9+mWHdCDlOoAhY5IWm3Ux2U8HXl8aoeyegjzxMxS9KMf:9+mWHdQlYh6IWqU0U836J3xMY9h
- TLSH
  T12E6723D0138914AFC532527B8C522B3B3AAB4CBD37A7531715543A2E28F76E44F6EAC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

banker defense_evasion discovery evasion impact persistence
- Checks if the Android device is rooted.
  defense_evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
  banker discovery
- Acquires the wake lock
- Queries information about active data network
  discovery
behavioral1 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6
- Target
  filetransfer.apk
- Size 18KB
- SHA256 96055a6e6694d6c6578b4dff108b83275758096af4a193c2701de354a26c7603
- MD5 fed901fecf7df630a4f77432aa6d09c4
- SHA1 e36169eb5414092ce5d25c194fadf85eca6c29cc
- SHA512 7a8612b767e1c6d6d7c0b2d3d7671ca18e33df385be725e53ee64cf7c3bac04d2e8425c75d4dbba7adae713789b3fd214acbd30bec91388865c86fef9baf2b39
- SSDEEP 384:JXhjYqi39Lw1w+AVX1Ctjo5d7BsqehoY5R3v6wAoAqykWrc:BhkF3Bw1xnU5d7GoyR3v653kz
- TLSH
  T13A82BF93EB474897C3B9767DE13D11C3697840BF6777AB5D4C10F89AEC089440E521B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11 behavioral12 behavioral7 behavioral8 behavioral9

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Tasks

Sharing

General

Malware Config

Targets

Checks if the Android device is rooted.

Loads dropped Dex/Jar

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Acquires the wake lock

Queries information about active data network

MITRE ATT&CK Mobile v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12