General

  • Target
    野村證券+-+スマホ1つで快適な資産運用+-_7.7.0_APKPure.xapk
  • Size 80.1MB
  • Sample260707-rdnerabt4y
  • SHA256 08db40991d5096c7ab2c6354b61f4c804e5c89ea7017ace1b6cdd31e0658565f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      config.arm64_v8a.apk
    • Size 58.3MB
    • SHA256 2e7bbac157c7ee3efab504006ea68e2c919f6d4ea7f95965dcd8fc13d69782f1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      config.en.apk
    • Size 44KB
    • SHA256 42f0176c00b605efc5a1a9a2e9fd0095e695a7a892f109aa39bafb1d990ca7c4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      config.fr.apk
    • Size 28KB
    • SHA256 821c10f39716fbc7b5863a2c93040484b262b954491527a3e4982b4485863986
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      config.mdpi.apk
    • Size 66KB
    • SHA256 75b84e63b85fb3bce2abec3dcf0b767191596070f81bef4de109bc80ecab9105
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      jp.co.nomura.nomuraapp.apk
    • Size 21.6MB
    • SHA256 6ca0c23f90ae6397eec301bcacdee2e3e5dcb7f5ceec618c92e9a43bd3e3dec7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks if the Android device is rooted.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Acquires the wake lock

    • Queries information about active data network

    • Reads information about phone network operator.

    • Checks the presence of a debugger

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Tasks