General
- Target Dooneh.apk
- Size 13.5MB
- Sample240522-nt141ade51
- SHA256 44388e1ea127dca2b4400fda9f5a30e17dc4862ff142c7492f0bb9b7f793215e
- MD5 36c300197182e64d87440159098f71ce
- SHA1 9f5cc990ff32291c76824e3f5fb44cca60164ae4
- SHA512 b3498d50cd098fb4c15364803c155853f58512a08615d26bc3cafbcc31a4ae808999bff2351dea76e95270ed4f9de936dea34bea6e53de00fe2f0d056ead6d9f
- SSDEEP 393216:cEJdST96fM8Mcd0Z970eW2vkSGhu1YXOK3InCl1TPQpDgiKrk:bJUTEfL6ZN0ZSwBXh3IKRsEQ
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Dooneh.apk
Resource
android-x86-arm-20240514-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target Dooneh.apk
- Size 13.5MB
- SHA256 44388e1ea127dca2b4400fda9f5a30e17dc4862ff142c7492f0bb9b7f793215e
- MD5 36c300197182e64d87440159098f71ce
- SHA1 9f5cc990ff32291c76824e3f5fb44cca60164ae4
- SHA512 b3498d50cd098fb4c15364803c155853f58512a08615d26bc3cafbcc31a4ae808999bff2351dea76e95270ed4f9de936dea34bea6e53de00fe2f0d056ead6d9f
- SSDEEP 393216:cEJdST96fM8Mcd0Z970eW2vkSGhu1YXOK3InCl1TPQpDgiKrk:bJUTEfL6ZN0ZSwBXh3IKRsEQ
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Checks if the Android device is rooted.
-
Queries the mobile country code (MCC)
-
Registers a broadcast receiver at runtime (usually for listening for system events)
-
Acquires the wake lock
-
Checks if the internet connection is available
-
Reads information about phone network operator.
-
Schedules tasks to execute at a specified time
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
-
Listens for changes in the sensor environment (might be used to detect emulation)
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
2System Checks
2