General

  • Target
    aa0dd1d81b068a0c29dc245217127141ff2dc73dd444d91aaae0656186902f6f.zip
  • Size 5.1MB
  • Sample261022-zesd4afv2v
  • SHA256 11f91b3cf826566fcf7975b1d0917737b0b5c69d8a1f94adf14d4cfdb005c6cc
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      aa0dd1d81b068a0c29dc245217127141ff2dc73dd444d91aaae0656186902f6f.apk
    • Size 5.7MB
    • SHA256 aa0dd1d81b068a0c29dc245217127141ff2dc73dd444d91aaae0656186902f6f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Attempts to obfuscate APK file format

      Applies obfuscation techniques to the APK format in order to hinder analysis

    • Declares services with permission to bind to the system

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Requests dangerous framework permissions

    • Checks the presence of a debugger

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Tasks