79c69b0ea10b2dff77c16ea3a1851cf6000aa2542cf75100747d31e57d1e8c47

General

Target
Config (6).apk
Size 4.5MB
Sample261007-d3yecscz3m
SHA256 79c69b0ea10b2dff77c16ea3a1851cf6000aa2542cf75100747d31e57d1e8c47
MD5 873af47f84fd2b40c97a8cfe9e3af693
SHA1 d7f9976d65d89930d5c4a96cf40acad5a8be7186
SHA512 568c0198de5e8f93e72fdd8bc2454c30228145320be197e87ec1c49321577c67c8e29d021168a7cdec5f33c13554f9a1db14c9a4a4a5f98c5c110c73be97d334
SSDEEP 98304:k0a0MlN7fP/nfmJWlxFfRUQi3ZU2dLK2mPFe/7rZV+UgOA4OxfnuKDu6:kzBnP/OJ8FpUbZtLa9irZV+UgHP/u2u6
TLSH
T13E263303C31FECACDAF18772EBB34313A2719856C387A35B9E5862A514873D49F05AD6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  Config (6).apk
- Size 4.5MB
- SHA256 79c69b0ea10b2dff77c16ea3a1851cf6000aa2542cf75100747d31e57d1e8c47
- MD5 873af47f84fd2b40c97a8cfe9e3af693
- SHA1 d7f9976d65d89930d5c4a96cf40acad5a8be7186
- SHA512 568c0198de5e8f93e72fdd8bc2454c30228145320be197e87ec1c49321577c67c8e29d021168a7cdec5f33c13554f9a1db14c9a4a4a5f98c5c110c73be97d334
- SSDEEP 98304:k0a0MlN7fP/nfmJWlxFfRUQi3ZU2dLK2mPFe/7rZV+UgOA4OxfnuKDu6:kzBnP/OJ8FpUbZtLa9irZV+UgHP/u2u6
- TLSH
  T13E263303C31FECACDAF18772EBB34313A2719856C387A35B9E5862A514873D49F05AD6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery
- Checks the application is allowed to request package installs through the package installer
  Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).
  defense_evasion
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
- Requests allowing to install additional applications from unknown sources.
  defense_evasion
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

1

T1016

Internet Connection Discovery

1

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

2

T1632

Code Signing Policy Modification

2

T1632.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Checks the application is allowed to request package installs through the package installer

Looks up external IP address via web service

Requests allowing to install additional applications from unknown sources.

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Tasks

static1

behavioral1

behavioral2

behavioral3