d14218c2cdd12da78a623acaf16e8b5140591db773e188f30dbe536fda5fb1e6

General

Target

d14218c2cdd12da78a623acaf16e8b5140591db773e188f30dbe536fda5fb1e6
Size

6.7MB
Sample

231224-ezv1haaag9
MD5

0581942695d65704206e4a634ba60f15
SHA1

e4c55b3eadefb5fe44f3a72197dcd7def087c51b
SHA256

d14218c2cdd12da78a623acaf16e8b5140591db773e188f30dbe536fda5fb1e6
SHA512

3d0fb8fcc87e2327ad0d6e3d6fdafc7ff2f288388dbf7d4c28d98691ae9a3e46f1a443230c21816d97b3ba9761544f7dc153bffd598a18a43601ff6d7801b942
SSDEEP

196608:p4q5RKzOYX9yKyM+SeHg+slNvVUw8Vwy4iPqS:p4DzOC9yK6jyNvaUiR

Score

8^/10

android evasion

Malware Config

Targets

- Target
  
  d14218c2cdd12da78a623acaf16e8b5140591db773e188f30dbe536fda5fb1e6
- Size
  
  6.7MB
- MD5
  
  0581942695d65704206e4a634ba60f15
- SHA1
  
  e4c55b3eadefb5fe44f3a72197dcd7def087c51b
- SHA256
  
  d14218c2cdd12da78a623acaf16e8b5140591db773e188f30dbe536fda5fb1e6
- SHA512
  
  3d0fb8fcc87e2327ad0d6e3d6fdafc7ff2f288388dbf7d4c28d98691ae9a3e46f1a443230c21816d97b3ba9761544f7dc153bffd598a18a43601ff6d7801b942
- SSDEEP
  
  196608:p4q5RKzOYX9yKyM+SeHg+slNvVUw8Vwy4iPqS:p4DzOC9yK6jyNvaUiR
Score

8^/10

evasion
- Requests cell location
  Uses Android APIs to to get current cell location.
- Checks known Qemu files.
  Checks for known Qemu files that exist on Android virtual device images.
- Checks known Qemu pipes.
  Checks for known pipes used by the Android emulator to communicate with the host.
- Queries the unique device ID (IMEI, MEID, IMSI)
- Reads information about phone network operator.
- Listens for changes in the sensor environment (might be used to detect emulation)
  evasion
behavioral1 behavioral2
- Target
  
  jfq.jar
- Size
  
  245KB
- MD5
  
  4f020ccbe7f65bbf89a5a4f7129e4f78
- SHA1
  
  a771cca83d1fa749a04cc9a484343f648c24b625
- SHA256
  
  645f1896a24799531364a92cc26918ef7e829627c438410eb482f9656ace61aa
- SHA512
  
  1e7a6f2680da2ce5475701dcf815f04c7b2eccc96ea377e636c0bee70d51d23d0584e7bf9b059fd6c7566bc2f7fc3e36c379632b40a2174a55eb163b12d9a544
- SSDEEP
  
  6144:XGoPOWAwTr734e4KG7SNlysZ1JBbvRJLKw5hZvN:rPOWnTrTL7XZvBbJJl1N
Score

1^/10
behavioral3 behavioral4 behavioral5

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

Requests cell location

Checks known Qemu files.

Checks known Qemu pipes.

Queries the unique device ID (IMEI, MEID, IMSI)

Reads information about phone network operator.

Listens for changes in the sensor environment (might be used to detect emulation)

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5