Overview

overview

8

Static

static

6

3f58e6cc8e...7f.apk

android-9-x86

7

3f58e6cc8e...7f.apk

android-11-x64

8

gdtadv2.apk

android-9-x86

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3f58e6cc8eac9a37a906e5b2eca28ebd4b11212685cc0bc128ba022b392ae07f

  • Size

    13.7MB

  • Sample

    231223-s1hcpaaaa2

  • MD5

    ee35edcbb861fd7a26a92dd8d3d19814

  • SHA1

    0593690d2f2307c24b2c6a5d6969a5f0447afe65

  • SHA256

    3f58e6cc8eac9a37a906e5b2eca28ebd4b11212685cc0bc128ba022b392ae07f

  • SHA512

    3c635697830858778fb3d2397db3f19b8fa3b14d4272034ce64540e044aa42666abcd7f34d96ff2f3ea615b1960f3e23d7af73762d95a71c9e2955853f977652

  • SSDEEP

    393216:JGeoAb6j92rW7UoLAcAt6RiZB0eTGVPKuYf3M5ww:J9oY6jKWAoLBB23bvMT

Score
8/10
androidevasion

Malware Config

Targets

    • Target

      3f58e6cc8eac9a37a906e5b2eca28ebd4b11212685cc0bc128ba022b392ae07f

    • Size

      13.7MB

    • MD5

      ee35edcbb861fd7a26a92dd8d3d19814

    • SHA1

      0593690d2f2307c24b2c6a5d6969a5f0447afe65

    • SHA256

      3f58e6cc8eac9a37a906e5b2eca28ebd4b11212685cc0bc128ba022b392ae07f

    • SHA512

      3c635697830858778fb3d2397db3f19b8fa3b14d4272034ce64540e044aa42666abcd7f34d96ff2f3ea615b1960f3e23d7af73762d95a71c9e2955853f977652

    • SSDEEP

      393216:JGeoAb6j92rW7UoLAcAt6RiZB0eTGVPKuYf3M5ww:J9oY6jKWAoLBB23bvMT

    Score
    8/10
    evasion

    • Requests cell location

      Uses Android APIs to to get current cell location.

    • Checks Android system properties for emulator presence.

    • Checks known Qemu files.

      Checks for known Qemu files that exist on Android virtual device images.

    • Checks known Qemu pipes.

      Checks for known pipes used by the Android emulator to communicate with the host.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Listens for changes in the sensor environment (might be used to detect emulation)

      evasion
    behavioral1behavioral2

    • Target

      gdtadv2.jar

    • Size

      636KB

    • MD5

      cf57d4f9f2ccd86816c4f02989252423

    • SHA1

      6978f24478ba9baa004bf4d21db251fe67957ec2

    • SHA256

      e6df28c535e661d33a134407674c32555fb985a6a8f3bf8ec743150db61fa7ec

    • SHA512

      f759aea4c4fb91ce69f8238bd0e7c0f99b826cad04fc9c5f47c5afde2eceaf71d515d00f0e08b73c169e1a8bd21a17ddd3971bae27ddeb6960daaf5c5d719d4b

    • SSDEEP

      12288:lsocNwAPog24tsNbfevYHzN953QZlo5M0f+DMpP7x07S232vjUG:MNvPA9oYHzN953QEM0npDx0nm

    Score
    1/10
    behavioral3

MITRE ATT&CK Matrix

Tasks