General
- Target config_service_core_v0.4.43.apk
- Size 4.8MB
- Sample261010-std2paev6p
- SHA256 00ad39e539d63dc56073d8970925fc8fffc6cc0f45849b73430a569f14266e04
- MD5 38e866c38d6afc5b640f7fd8dc317b06
- SHA1 14132a80177936638e4d55c3a11035e43df552fa
- SHA512 1455433f21913b82aa396ffc3cd515af75d311e83b4d8ac32731f8ecd756c3f3625e9e65bebb57545e26535c1caeee0461c76fa09245e05d4e6943173f26518a
- SSDEEP 98304:Wibg4QOVpQdMjwT5YQFdvjts8ftRrm55T:Wik4DV8XTLvg5T
- TLSH T12136AE46E7501D2AC8FE827A28B74B2023765D41D7839747210CB6686FB77E91F8DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
config_service_core_v0.4.43.apk
Resource
android-35-x64-arm64-20260325-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target config_service_core_v0.4.43.apk
- Size 4.8MB
- SHA256 00ad39e539d63dc56073d8970925fc8fffc6cc0f45849b73430a569f14266e04
- MD5 38e866c38d6afc5b640f7fd8dc317b06
- SHA1 14132a80177936638e4d55c3a11035e43df552fa
- SHA512 1455433f21913b82aa396ffc3cd515af75d311e83b4d8ac32731f8ecd756c3f3625e9e65bebb57545e26535c1caeee0461c76fa09245e05d4e6943173f26518a
- SSDEEP 98304:Wibg4QOVpQdMjwT5YQFdvjts8ftRrm55T:Wik4DV8XTLvg5T
- TLSH T12136AE46E7501D2AC8FE827A28B74B2023765D41D7839747210CB6686FB77E91F8DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Makes use of the framework's Accessibility service
Retrieves information displayed on the phone screen using AccessibilityService.
-
Reads the contacts stored on the device.
-
Reads the content of the SMS messages.
-
Reads the content of the call log.
-
Acquires the wake lock
-
Makes a phone call.
-
Performs UI accessibility actions on behalf of the user
Application may abuse the accessibility service to prevent their removal.
-
Queries information about active data network
MITRE ATT&CK Mobile v16
Defense Evasion
Impair Defenses
1Prevent Application Removal
1Input Injection
1Discovery
Software Discovery
1Security Software Discovery
1System Network Connections Discovery
1