General
- Target e2db34355df77e3c95e291a1374e4ba6a75d0da471ab9f929b9ef3424f824421
- Size 4.9MB
- Sample260727-kabs8ayfrb
- SHA256 e2db34355df77e3c95e291a1374e4ba6a75d0da471ab9f929b9ef3424f824421
Score
7/10
Malware Config
Targets
-
- Target e2db34355df77e3c95e291a1374e4ba6a75d0da471ab9f929b9ef3424f824421
- Size 4.9MB
- SHA256 e2db34355df77e3c95e291a1374e4ba6a75d0da471ab9f929b9ef3424f824421
Score7/10-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Acquires the wake lock
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
-
Requests enabling of the accessibility settings.
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Download New Code at Runtime
1Foreground Persistence
1Hide Artifacts
1User Evasion
1Input Injection
1