42f753f6213ea4041cc9ae3e4b06e039dda89cde58c5a3c475a15d34895a47ce

General

Target

Film_App_v4.4.7.apk
Size

12.1MB
Sample

240316-hh6bpaea6z
MD5

c8822f0ff5987b2427959afdea3eeea0
SHA1

3ee3b46631632f5d82163f78feb8d1f2fdd2d7ec
SHA256

42f753f6213ea4041cc9ae3e4b06e039dda89cde58c5a3c475a15d34895a47ce
SHA512

7695d9bc54fadae36710ef4452ac8a5873ee3e8ea7046d0b6843f6715a5dd4ad39c69b3fdd1f2855f5c8f7239e7976400c44bc46b6f2f9197616e94e9577b21f
SSDEEP

196608:cGZJnSAyDRCVSBQ6R2soj20orj3np17wQKXLu9kXHY250N+ZXhYVB+EMY:lZJrE3oy0orj3phwQa4RTPV

Score

7^/10

Malware Config

Targets

- Target
  
  Film_App_v4.4.7.apk
- Size
  
  12.1MB
- MD5
  
  c8822f0ff5987b2427959afdea3eeea0
- SHA1
  
  3ee3b46631632f5d82163f78feb8d1f2fdd2d7ec
- SHA256
  
  42f753f6213ea4041cc9ae3e4b06e039dda89cde58c5a3c475a15d34895a47ce
- SHA512
  
  7695d9bc54fadae36710ef4452ac8a5873ee3e8ea7046d0b6843f6715a5dd4ad39c69b3fdd1f2855f5c8f7239e7976400c44bc46b6f2f9197616e94e9577b21f
- SSDEEP
  
  196608:cGZJnSAyDRCVSBQ6R2soj20orj3np17wQKXLu9kXHY250N+ZXhYVB+EMY:lZJrE3oy0orj3phwQa4RTPV
Score

7^/10

discovery evasion
- Checks known Qemu pipes.
  Checks for known pipes used by the Android emulator to communicate with the host.
  evasion
- Acquires the wake lock
- Legitimate hosting services abused for malware hosting/C2
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

1

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

1

T1633

System Checks

1

T1633.001

Credential Access

Discovery

System Network Configuration Discovery

1

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks known Qemu pipes.

Acquires the wake lock

Legitimate hosting services abused for malware hosting/C2

Reads information about phone network operator.

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Tasks

static1

behavioral1

behavioral2