6bb0f97bcff0be50c960dd85bbf9ca76e7100a31e3d7ebf6e2c457e9488fa9ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Snaptube_20240409.apk
Size

21.6MB
Sample

240409-x24drsfd36
MD5

413d63f602c3f2f76e9a3b2d5893db0c
SHA1

14ae9d90855b93b390af5e35c8c250b65b0b59c8
SHA256

6bb0f97bcff0be50c960dd85bbf9ca76e7100a31e3d7ebf6e2c457e9488fa9ce
SHA512

7f2f7061ff6d8412fb48607026ff43738bf18f6675f4ad5ac2b943ba371294a59273359ea7203d6f445f93e5c740be414ef160422b1cdc4d6b40020eda7cab3b
SSDEEP

393216:6fJIVQ6jbqtd3TFhr5pnyxtOCbIMXdi3e0g4uXJ+lcwKKqcUdDnA0O/MWI:6z6jbqL3TFhrrn81IMXge07KKqcUtSo

Score

7^/10

android discovery evasion

Malware Config

Targets

- Target
  
  Snaptube_20240409.apk
- Size
  
  21.6MB
- MD5
  
  413d63f602c3f2f76e9a3b2d5893db0c
- SHA1
  
  14ae9d90855b93b390af5e35c8c250b65b0b59c8
- SHA256
  
  6bb0f97bcff0be50c960dd85bbf9ca76e7100a31e3d7ebf6e2c457e9488fa9ce
- SHA512
  
  7f2f7061ff6d8412fb48607026ff43738bf18f6675f4ad5ac2b943ba371294a59273359ea7203d6f445f93e5c740be414ef160422b1cdc4d6b40020eda7cab3b
- SSDEEP
  
  393216:6fJIVQ6jbqtd3TFhr5pnyxtOCbIMXdi3e0g4uXJ+lcwKKqcUdDnA0O/MWI:6z6jbqL3TFhrrn81IMXge07KKqcUtSo
Score

7^/10

discovery evasion
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Queries information about running processes on the device.
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Acquires the wake lock
- Checks the presence of a debugger
  evasion
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

Process Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion