metasploit | b789b43fb6332afce30a79e648d5f643c693e64ea63f22ecbaa6a119b0c1d3d9 | Triage

Sharing

General

Target

b789b43fb6332afce30a79e648d5f643c693e64ea63f22ecbaa6a119b0c1d3d9.apk
Size

906KB
Sample

240430-m9e12aag5v
MD5

8ca7a3b6a839d786aabff86c6dd0060b
SHA1

f4b14a644fa7a411b5cdc977d4edf81827d31489
SHA256

b789b43fb6332afce30a79e648d5f643c693e64ea63f22ecbaa6a119b0c1d3d9
SHA512

3f159e9f36f738b91ff0ab66c6c759d59dac223cf2d1fd87d106f67c1bb8bfbfd720348175c803edee3e02c5feeb410104b81ddb5e940bbb21ef356102198f4d
SSDEEP

24576:+GRf7QBdbrtOESMaQA5sNsroSOBPgRFVYZsXc2M:n7QrqsNsr9OpugsXcP

Score

10^/10

metasploit android discovery evasion impact persistence

Malware Config

Targets

- Target
  
  b789b43fb6332afce30a79e648d5f643c693e64ea63f22ecbaa6a119b0c1d3d9.apk
- Size
  
  906KB
- MD5
  
  8ca7a3b6a839d786aabff86c6dd0060b
- SHA1
  
  f4b14a644fa7a411b5cdc977d4edf81827d31489
- SHA256
  
  b789b43fb6332afce30a79e648d5f643c693e64ea63f22ecbaa6a119b0c1d3d9
- SHA512
  
  3f159e9f36f738b91ff0ab66c6c759d59dac223cf2d1fd87d106f67c1bb8bfbfd720348175c803edee3e02c5feeb410104b81ddb5e940bbb21ef356102198f4d
- SSDEEP
  
  24576:+GRf7QBdbrtOESMaQA5sNsroSOBPgRFVYZsXc2M:n7QrqsNsr9OpugsXcP
Score

7^/10

discovery evasion impact persistence
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries the mobile country code (MCC)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Acquires the wake lock
- Checks if the internet connection is available
  discovery
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

discoveryevasionimpactpersistence