General

  • Target
    sms-spy-v3.apk
  • Size 6.1MB
  • Sample260705-ay45kabt6n
  • SHA256 d938763d935cc9b880575ee1fa2fc61022e091ea0d2d2caa94942569d4306854
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      sms-spy-v3.apk
    • Size 6.1MB
    • SHA256 d938763d935cc9b880575ee1fa2fc61022e091ea0d2d2caa94942569d4306854
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks Android system properties for emulator presence.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Reads the contacts stored on the device.

    • Reads the content of SMS inbox messages.

    • Reads the content of the call log.

    • Queries the mobile country code (MCC)

    • Requests accessing notifications (often used to intercept notifications before users become aware).

    • Requests changing the default SMS application.

    • Requests enabling of the accessibility settings.

MITRE ATT&CK Mobile v16

Tasks