5765f8eb3c29873bbff11b09413f40a0f535b41b63a3a70269dac2dd7250a85d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FortniteInstaller-5.4.0.apk
Size

11.5MB
Sample

240512-qbbshaah83
MD5

546ec5a68b9ab76679ee06fae9aca284
SHA1

64ac9b9c751ac518532d29e103b8549f799e0650
SHA256

5765f8eb3c29873bbff11b09413f40a0f535b41b63a3a70269dac2dd7250a85d
SHA512

ad802291bdb5a71f52d2a282ea74378b807f053bca8ac9347833bab1689cbae99bbe09226752e4a52ed97c4f0bfae662c8a373b41328143a9aa4b19e1dc0bcff
SSDEEP

196608:Ylu7BheK1+Uqog2/0w9CVC98jBjF95I29Nn2q6zeFp5E8nEC3L61YZQbJz9eMhNU:37Bn39ChBl9dSeFp5rnEU6wOJz9HNcOW

Score

7^/10

android discovery evasion persistence

Malware Config

Targets

- Target
  
  FortniteInstaller-5.4.0.apk
- Size
  
  11.5MB
- MD5
  
  546ec5a68b9ab76679ee06fae9aca284
- SHA1
  
  64ac9b9c751ac518532d29e103b8549f799e0650
- SHA256
  
  5765f8eb3c29873bbff11b09413f40a0f535b41b63a3a70269dac2dd7250a85d
- SHA512
  
  ad802291bdb5a71f52d2a282ea74378b807f053bca8ac9347833bab1689cbae99bbe09226752e4a52ed97c4f0bfae662c8a373b41328143a9aa4b19e1dc0bcff
- SSDEEP
  
  196608:Ylu7BheK1+Uqog2/0w9CVC98jBjF95I29Nn2q6zeFp5E8nEC3L61YZQbJz9eMhNU:37Bn39ChBl9dSeFp5rnEU6wOJz9HNcOW
Score

7^/10

discovery evasion persistence
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks the presence of a debugger
  evasion
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasion

behavioral3

discoveryevasion

behavioral4

discoveryevasion