General

  • Target
    Quest Tools - dex.apk
  • Size 31.7MB
  • Sample260810-pg8hzsgr9v
  • SHA256 d2c6da76cf42643bb1d92e14e23dce5d3efb35771ffa8535aaecd51fd94405ce
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Quest Tools - dex.apk
    • Size 31.7MB
    • SHA256 d2c6da76cf42643bb1d92e14e23dce5d3efb35771ffa8535aaecd51fd94405ce
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Target
      AppPatcher.apk
    • Size 7.1MB
    • SHA256 a29bd0fa544b2d017a7a4523764e32dab415adeeefccbfb9ec899454dd249fa6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Target
      Singularity.apk
    • Size 27.6MB
    • SHA256 bfb1cb040df5fb4fc1d3d1c41beabd715b37fa768bc2106fcd8b87108fcc9364
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      magisk.apk
    • Size 5.7MB
    • SHA256 bed5fb4e55dc3ded39653298b3995b30559efde0387e1104e7f521f6bba139ae
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Target
      stub.apk
    • Size 80KB
    • SHA256 f0f6138cd9c33f6c2a917b21a0f2d880068d983ac11cacff8f91b4cef1b3c022
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Queries information about active data network

    • Requests dangerous framework permissions

MITRE ATT&CK Mobile v16

Tasks