e939e9c32b65e10e295056d8d535e78b0a9efd26da3de036e83b3b0e9147c000

General

Target
e939e9c32b65e10e295056d8d535e78b0a9efd26da3de036e83b3b0e9147c000.apk
Size 12.5MB
Sample260818-3a2nrasemf
SHA256 e939e9c32b65e10e295056d8d535e78b0a9efd26da3de036e83b3b0e9147c000
MD5 7b9390582033785190dad91b967a265a
SHA1 599216e298ba420b46997e427bde6ea2ebf74079
SHA512 fecd03c0e55544d9a20d34d32e2e9233d274790849f24ccfcae622abf18a862e4aa2b78f793fda2798d0678e56d917eb3d3bcc0279c94e380e2ed8b87a2c778c
SSDEEP 196608:hfAr1tqLzPeGYNtb61llSnPr634Jj2rJxS3zmrCYksTy3oxqoAV:h4r3qLzP5YNtbmlS+oJjmGzpsTy3C2
TLSH
T1BCD61296F3ADEC2FC433A033CA6912B645594D659E42EB673409B71C29F3AD48F49BC0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  e939e9c32b65e10e295056d8d535e78b0a9efd26da3de036e83b3b0e9147c000.apk
- Size 12.5MB
- SHA256 e939e9c32b65e10e295056d8d535e78b0a9efd26da3de036e83b3b0e9147c000
- MD5 7b9390582033785190dad91b967a265a
- SHA1 599216e298ba420b46997e427bde6ea2ebf74079
- SHA512 fecd03c0e55544d9a20d34d32e2e9233d274790849f24ccfcae622abf18a862e4aa2b78f793fda2798d0678e56d917eb3d3bcc0279c94e380e2ed8b87a2c778c
- SSDEEP 196608:hfAr1tqLzPeGYNtb61llSnPr634Jj2rJxS3zmrCYksTy3oxqoAV:h4r3qLzP5YNtbmlS+oJjmGzpsTy3C2
- TLSH
  T1BCD61296F3ADEC2FC433A033CA6912B645594D659E42EB673409B71C29F3AD48F49BC0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

google discovery evasion persistence phishing
- Detected google phishing page
  Potential google account phishing
  phishing google
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

1

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

1

T1624

Broadcast Receivers

1

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

1

T1407

Credential Access

Discovery

Process Discovery

1

T1424

System Network Configuration Discovery

1

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Detected google phishing page

Loads dropped Dex/Jar

Queries information about running processes on the device

Queries the phone number (MSISDN for GSM devices)

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Tasks

static1

behavioral1

behavioral2

behavioral3