The Phone was Compromised Before the User Turned it on: The Rise of Midnight Mimosa

Detection Query 1 :

domainname like "aa86a52a98162b7d.com" or url like "aa86a52a98162b7d.com" or siteurl like "aa86a52a98162b7d.com" or domainname like "442fe7151fb1e9b5.com" or url like "442fe7151fb1e9b5.com" or siteurl like "442fe7151fb1e9b5.com" or domainname like "oss.showtimetool.com" or url like "oss.showtimetool.com" or siteurl like "oss.showtimetool.com" or domainname like "api.weatherlive.world/br_upgrade/upgradeV2/getConfigs" or siteurl like "api.weatherlive.world/br_upgrade/upgradeV2/getConfigs" or url like "api.weatherlive.world/br_upgrade/upgradeV2/getConfigs" or domainname like "api.weatherlive.world/odborwer_dot/cm" or siteurl like "api.weatherlive.world/odborwer_dot/cm" or url like "api.weatherlive.world/odborwer_dot/cm" or domainname like "39.96.8.180:9008/ssc/rprt/bug" or siteurl like "39.96.8.180:9008/ssc/rprt/bug" or url like "39.96.8.180:9008/ssc/rprt/bug" or domainname like "120.78.215.151:80/api/bugLog" or siteurl like "120.78.215.151:80/api/bugLog" or url like "120.78.215.151:80/api/bugLog" or domainname like ".apple.{0aa0cf0637d66c0d.com" or siteurl like ".apple.{0aa0cf0637d66c0d.com" or url like ".apple.{0aa0cf0637d66c0d.com" or domainname like "v46wd6uramzkmeeo.in" or siteurl like "v46wd6uramzkmeeo.in" or url like "v46wd6uramzkmeeo.in" or domainname like "com.android.system.lite" or siteurl like "com.android.system.lite" or url like "com.android.system.lite"

Detection Query 2 :

dstipaddress IN ("39.96.8.180","85.17.70.38","120.78.215.151") or srcipaddress IN ("39.96.8.180","85.17.70.38","120.78.215.151")

Detection Query 3 :

md5hash IN ("08d231c6a5303e543eb60d4181f6a4ea","3bb270d4927e2a8385793d9084a92fd3","250205ee4b8de59e60c745856f439608","dce5b0dc0e7d7059b5ab8384a7c24ec4","4507363415e7dc6d2cab14eeed137f6c","d3faec4f013c4a1e84a1d681448312c0","33b2d3ec9a35cfb0b5a5d7b24ce4140e","05ae89e761a890fa24f80f4be7263651","a147cd8f72aadfcf78f7723db6813e86","af7f1eef22bf5ee3d0a394f53ba7e1b8","fcb9f38cc687fc8a4637e0acdf91ab66","fc812444baa071f5141ddad812d673de","815b910f1efc95f38ba0c5b12c4f2129","0903d7fd3e1d4a599a7eb3c5d356779b","5b3a49938f455d1197736971c4c07228","9a3d04aa36654b5c4b21edd22e46f92d","c55c9d7e12cc273b812ceffca8f62d4b","ee4e778e53ce4d4339d7c7888d06384d","6739fe083cfa8dec9b4f989ccba0e99e","36f9e8cf47a28f9803fba427cf02a25c","60bc23d3d453f258e2c4ca421cd086a9","345057421c7d9ac2b671c47449f35030","be22c91b4578ac2357a16133615df335","2b7f1a7d5f5515c05d0c8e3857155ae2","9f1e2249003ab22cf8a38048e0ff6f6c","c8ea2a7c1f52c4c2474475c28373ee27","d9fc6b2cd5eaa3929207f1029663d947","879168159c155758dbfd7a76e8f21548","838dc8fcde1b28171e404ece1cfcde44","7400c34f7c6f866499029f5e759f58bd","e51c11442a529dcd06dc7c8e45974ec2","b7d0d5ae09b0d2d2f999c1087c450456","ac8957a474f8aa812c7b233aafde4723","0b8d3cd264c191f4884a25d0cc5318b5","9e7b34e63d8d38e37667f88a945ae69a","e9b91e1d94bb3ff9a1c00b1c13eb7960","61aac6a98abd6dcff0dc41bb88159786","2de346602433cdd1668f36b2e9db0be1","ab8d6be686ca9413e27a11e85f9cef1a","e6650dc6721aaa27f8a289ff92e613ff","1414d4ef2d1191080abc59a407dcb6c5","cf4f24fdd283f80313565b08fea9d06d","e39bddf592016ad6d0784770df3e2ffe","079298a7a506b376def4f4ff9a250672","d4ceb05682ecd60f4ebb4e76e02fcf7d","36deebfcda4012d18706cd170c1edf1f","4a171f62d1bab01827b06ae73d4caafa","e974cf4cc5d55cddc04f026dd3ea72b8","642d84ed5660407b972f1df642acb192","b862681953e945439167a736ba4cd41b","4e46549122c0236307c5eef8891466f5","66c6512b9a73425aba40c8bfa95d23a0","cdfcc848e16660d607aba6ecf24567f4","2b784622422f4280e0b3e38b30dd87bc","7469c9c06e5f324ca608e0140156bbad","5d29e9b24708c3ec36d1d59036124838","765d3ce85a6393d05973c4cfa7738116","ca7e2d265fc35aede432c4636a2cf4cb","5400ffac371c5e5c9b7f3705ce9faca5","387f7af167530486adcf3d8546063462","6ee2be3e5558085b532dacc8db61f3e9","37f18a20b9cf32e6f07450e903eaad7c","512a6db4a22244272826f39da020fb44","f456f0c6b89bd3d5124699d43971d094","3d3358b1057b1bfbd7e60577d8a31e0c","6eea0568d5cc776ae03e09149cec3cd8","92f2fd8bcccc8ec4ffa64c7f6b3b9b8d","b974ef4106af6b932df352563a9b8b3c","af16072864ae0f9d755f8cf00fded359","1da42505f1c83959c7f901f5139a158e","2c77653b889dfccd649b82446f8c0d1b","998e9010e5dfc4e4645f5572cbbe5b53","b3a4405d1b8d43545d07b10581008d32","0377ca97ac0ca35f9134052fede67a81","0b0d8e995e6ff24d4e9d00417446c25e","6aca76699ec0bb8e51372d5c68c8359b","c75ec7f3bcbc879aae9a21ad544d3232","d5d88214170875386ab855172f881e51","ed1a6bed83899952b464c27aef9752cc","a57a1ba15364dfb35d334f644d7049e8","cde0490e11db8ad54737c1df59ec658b","7f7747575980098bdc98e7b7aa362697","e75e183027bf897eda6447366c7acd01","20108557cacd24263e7e611afc327801","aac942aaf6ec0773cbac87fde4a6b284","cf20de9d9ddc952bb2265002d26a916f","f602230f54507cbddf5ef3014737d768","20cefb2c667f945d482daded7e698eea","254bc5f6f81de1f3c47534e6febaf023","31b3280f1c0836c39c470932cf6c3e6f","3b35d3c5667136134b20a8411803c97d","3bc159537c909fa86bcc55eda127b5aa","42a9f64e75911c167ec7a163e8b24920","6df909898f5f1394e78508d1152fab38","90e0d27d808105167fdaa3a22b918217","a02f28387527abe90d73d2879f671972","abe12db77a62ecb99d6ab5dc4fff18c7","de66cac88f156c3227749e03bdf7cf54","e7c56b4f580da53cd0e4f11d1a11e402","f0b7b1c940ebcee97eb68f528682fc50","1150da1af88729e54a34b8da5a2741c7","9a46098de785ae732e5fced55a2f3063","d145b14b9cc15799485f2592b2c16d9a","0a26a9d5f7ab91cb5eed852cf83ef078","294ab3f586d76772ae89add417cf6324","a13af0174bc211709e8b73bf60492a17","e9ec6d7b50c1e54cd523283b9de55e10","b6c5f7dfaf9d47cd67380a48df5e1731","cb19dbf279a3488aec76c17e8e122c14","4f7d3c5859100d65ff02449884841b9c","50e9cdc3ed145bbc688356eda07f8eb3","4521a5bbe0f33a15da86bd80ff5d6d9c","8ec360829f4f7ae8dcae47c02b996762","d56158a2cc8d13778df850907733b2c4","fac6548a4a7a88156468b809c4f877f5","3c098465af131141996ff840bd34e791","836739fe7196437d8e998245b6f2b3b4","d6ba4044f9d57f7e86d83187982ed593","da67e37be01c20566990152ecfb14ed1")