Mishing in Motion: Uncovering the Evolving Functionality of FakeCall Malware
Tags
cmtmf-attack-pattern: Foreground Persistence Location Tracking Native Code Obfuscated Files Or Information Suppress Application Icon
maec-delivery-vectors: Watering Hole
attack-pattern: Data Accessibility Features - T1546.008 Audio Capture - T1429 Boot Or Logon Initialization Scripts - T1398 Call Control - T1616 Call Log - T1636.002 Contact List - T1636.003 Credentials - T1589.001 Download New Code At Runtime - T1407 Exfiltration Over C2 Channel - T1646 File And Directory Discovery - T1420 Foreground Persistence - T1541 Gui Input Capture - T1056.002 Gui Input Capture - T1417.002 Hide Artifacts - T1628 Hide Artifacts - T1564 Input Capture - T1417 Input Injection - T1516 Location Tracking - T1430 Malware - T1587.001 Malware - T1588.001 Obfuscated Files Or Information - T1406 Native Api - T1575 Phishing - T1660 Phishing - T1566 Protected User Data - T1636 Screen Capture - T1513 Server - T1583.004 Server - T1584.004 Sms Control - T1582 Sms Messages - T1636.004 Software Packing - T1027.002 Software Packing - T1406.002 Suppress Application Icon - T1628.001 Suppress Application Icon - T1508 Video Capture - T1512 Accessibility Features - T1015 Audio Capture - T1123 Logon Scripts - T1037 Execution Through Api - T1106 Exfiltration Over Command And Control Channel - T1041 File And Directory Discovery - T1083 Input Capture - T1056 New Service - T1050 Obfuscated Files Or Information - T1027 Screen Capture - T1113 Software Packing - T1045 Video Capture - T1125 Screen Capture
Show in Graph
Common Information
Type Value
UUID 42d8be0e-f3c8-438f-8912-b7634424e197
Fingerprint bd2529198923a7cb
Analysis status DONE
Considered CTI value 2
Text language
Published Oct. 30, 2024, 1:05 p.m.
Added to db Oct. 30, 2024, 2:11 p.m.
Last updated Nov. 14, 2024, 6:08 a.m.
Headline Mishing in Motion: Uncovering the Evolving Functionality of FakeCall Malware
Title Mishing in Motion: Uncovering the Evolving Functionality of FakeCall Malware
Detected Hints/Tags/Attributes 116/3/27
Source URLs
Redirection Url
Details Source https://malware.news/t/mishing-in-motion-uncovering-the-evolving-functionality-of-fakecall-malware/87960
URL Provider
Details Provider Source level domain
Details malware.news malware.news
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 158 ✔ Malware Analysis, News and Indicators - Latest topics https://malware.news/latest.rss 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 4 
com.secure
Details Domain 4 
com.skt.prod
Details Domain 57 
com.google.android
Details Domain 188 
com.android
Details File 172 
androidmanifest.xml
Details File 30 
android.sys
Details File 5 
settings.sys
Details MITRE ATT&CK Techniques 17 
T1660
Details MITRE ATT&CK Techniques 10 
T1398
Details MITRE ATT&CK Techniques 4 
T1541
Details MITRE ATT&CK Techniques 15 
T1406.002
Details MITRE ATT&CK Techniques 15 
T1407
Details MITRE ATT&CK Techniques 14 
T1575
Details MITRE ATT&CK Techniques 8 
T1628.001
Details MITRE ATT&CK Techniques 9 
T1417.002
Details MITRE ATT&CK Techniques 16 
T1420
Details MITRE ATT&CK Techniques 21 
T1430
Details MITRE ATT&CK Techniques 22 
T1429
Details MITRE ATT&CK Techniques 10 
T1616
Details MITRE ATT&CK Techniques 12 
T1636.002
Details MITRE ATT&CK Techniques 17 
T1636.003
Details MITRE ATT&CK Techniques 17 
T1636.004
Details MITRE ATT&CK Techniques 16 
T1513
Details MITRE ATT&CK Techniques 10 
T1512
Details MITRE ATT&CK Techniques 16 
T1646
Details MITRE ATT&CK Techniques 15 
T1582
Details MITRE ATT&CK Techniques 15 
T1516