General
- Target 6215b1d608efa8a3784d9736c4dea06fbc074375938cee6eb525f0c2c9b8a0ad.apk
- Size 4.6MB
- Sample260828-vbb6gscm41
- SHA256 6215b1d608efa8a3784d9736c4dea06fbc074375938cee6eb525f0c2c9b8a0ad
Score
8/10
Malware Config
Targets
-
- Target 6215b1d608efa8a3784d9736c4dea06fbc074375938cee6eb525f0c2c9b8a0ad.apk
- Size 4.6MB
- SHA256 6215b1d608efa8a3784d9736c4dea06fbc074375938cee6eb525f0c2c9b8a0ad
Score8/10-
Checks if the Android device is rooted.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries the phone number (MSISDN for GSM devices)
-
Reads the content of the SMS messages.
-
Acquires the wake lock
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Requests disabling of battery optimizations (often used to enable hiding in the background).
MITRE ATT&CK Enterprise v16
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Scheduled Task/Job
1Defense Evasion
Foreground Persistence
1Hide Artifacts
1User Evasion
1Obfuscated Files or Information
1Virtualization/Sandbox Evasion
2System Checks
2