General

  • Target
    Center+Security+-+Antivirus_1.1_APKPure.apk
  • Size 14.1MB
  • Sample260720-tln3csfx9q
  • SHA256 d5eeaecfd760edadf939a79b3baddc90d7480a0a9c9a68f86b284c388da8020c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • sharkbot

C2
  • http://sigmastats.xyz/

Targets

    • Target
      Center+Security+-+Antivirus_1.1_APKPure.apk
    • Size 14.1MB
    • SHA256 d5eeaecfd760edadf939a79b3baddc90d7480a0a9c9a68f86b284c388da8020c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

MITRE ATT&CK Mobile v16

Tasks