General

  • Target

    bowmasters-mod_6.0.2-.apk

  • Size

    206.1MB

  • Sample

    240421-t15cwsfe5x

  • MD5

    e987118409c6b82eb0e8d99b6888a87e

  • SHA1

    9e89886973ab4fc702b6af0babc4d7f488d73b64

  • SHA256

    6ed32821e9bd47a712906d1c9204cd744dc2e22c04272582cc793493b4efcb58

  • SHA512

    b5476946a3e0317eee1824542b46b40afcbb78ef450ce03acd6f5cb93a56d895efe35cf7e4cf4764e346a2d467b173ffbf012865fe4c40d8755e272683dc28b2

  • SSDEEP

    6291456:HaXNf87whZwdjFtQmWSfNAh2Hwnl2aPtlZ5k4NaP8Gh7:HCRMwhZCj97VAhownlpjZW4A

Malware Config

Targets

    • Target

      bowmasters-mod_6.0.2-.apk

    • Size

      206.1MB

    • MD5

      e987118409c6b82eb0e8d99b6888a87e

    • SHA1

      9e89886973ab4fc702b6af0babc4d7f488d73b64

    • SHA256

      6ed32821e9bd47a712906d1c9204cd744dc2e22c04272582cc793493b4efcb58

    • SHA512

      b5476946a3e0317eee1824542b46b40afcbb78ef450ce03acd6f5cb93a56d895efe35cf7e4cf4764e346a2d467b173ffbf012865fe4c40d8755e272683dc28b2

    • SSDEEP

      6291456:HaXNf87whZwdjFtQmWSfNAh2Hwnl2aPtlZ5k4NaP8Gh7:HCRMwhZCj97VAhownlpjZW4A

    • Checks Android system properties for emulator presence.

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks Qemu related system properties.

      Checks for Android system properties related to Qemu for Emulator detection.

    • Checks known Qemu files.

      Checks for known Qemu files that exist on Android virtual device images.

    • Checks known Qemu pipes.

      Checks for known pipes used by the Android emulator to communicate with the host.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Registers a broadcast receiver at runtime (usually for listening for system events)

    • Checks if the internet connection is available

    • Reads information about phone network operator.

    • Checks the presence of a debugger

    • Listens for changes in the sensor environment (might be used to detect emulation)

MITRE ATT&CK Mobile v15

Tasks