4ae6eaf06047e3a164c442112e10185222ece46e49e9e3a5b2b9e74dcdb49e13 | Triage

Sharing

General

Target

app-release-xjtwms_4.2.0.apk
Size

8.8MB
Sample

240521-gd67raea97
MD5

8b7dc53f7b572c34b5fe4e38c2682648
SHA1

c323dd5fffc3399ef93e99510b4377b9edd32a43
SHA256

4ae6eaf06047e3a164c442112e10185222ece46e49e9e3a5b2b9e74dcdb49e13
SHA512

2a46fb4f7edf7635f0e4af8f12b089d1cb1f9fd488aadf5544daf1cefaa8e3b6171523e40c2992b0b028553cd1d25d12788c566485afbef0b644b8a28d8ecdcc
SSDEEP

196608:VpIuq0AUscfMttuUm/t0AIXxNEwszmh+Z3O93rPk1yUHarGA:Ve/2sckDu7eLFh+Z3OprPkNA

Score

8^/10

android discovery evasion persistence

Malware Config

Targets

- Target
  
  app-release-xjtwms_4.2.0.apk
- Size
  
  8.8MB
- MD5
  
  8b7dc53f7b572c34b5fe4e38c2682648
- SHA1
  
  c323dd5fffc3399ef93e99510b4377b9edd32a43
- SHA256
  
  4ae6eaf06047e3a164c442112e10185222ece46e49e9e3a5b2b9e74dcdb49e13
- SHA512
  
  2a46fb4f7edf7635f0e4af8f12b089d1cb1f9fd488aadf5544daf1cefaa8e3b6171523e40c2992b0b028553cd1d25d12788c566485afbef0b644b8a28d8ecdcc
- SSDEEP
  
  196608:VpIuq0AUscfMttuUm/t0AIXxNEwszmh+Z3O93rPk1yUHarGA:Ve/2sckDu7eLFh+Z3OprPkNA
Score

8^/10

discovery evasion persistence
- Checks if the Android device is rooted.
  evasion
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
behavioral1 behavioral2

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasionpersistence