744e1992cf38248d346e7b021d57197659848d21ba851660775b2f2da8797df5 | Triage

Sharing

General

Target

zzhy0215.apk
Size

6.8MB
Sample

240523-nwxjlaeh41
MD5

51419b5d7e9809a376fa9ea41ddc1985
SHA1

6af17f47376370385176f52fe3b966270628b92d
SHA256

744e1992cf38248d346e7b021d57197659848d21ba851660775b2f2da8797df5
SHA512

29e718ab8ac309745db1a3817a7d5e13f4b224c4010f9cd5125e35d76c551ce89035ac71ea35e57669dd93fbd54d0c9cd9d2ae0b7ba7858f61121ffb35b7609d
SSDEEP

196608:sUywdHql/E+9DnFcg6UfWWb9rg+9CPfCfBFmoSumeh:sXl7BnB6ez9rg+9/FvSumq

Score

8^/10

android discovery evasion impact persistence

Malware Config

Targets

- Target
  
  zzhy0215.apk
- Size
  
  6.8MB
- MD5
  
  51419b5d7e9809a376fa9ea41ddc1985
- SHA1
  
  6af17f47376370385176f52fe3b966270628b92d
- SHA256
  
  744e1992cf38248d346e7b021d57197659848d21ba851660775b2f2da8797df5
- SHA512
  
  29e718ab8ac309745db1a3817a7d5e13f4b224c4010f9cd5125e35d76c551ce89035ac71ea35e57669dd93fbd54d0c9cd9d2ae0b7ba7858f61121ffb35b7609d
- SSDEEP
  
  196608:sUywdHql/E+9DnFcg6UfWWb9rg+9CPfCfBFmoSumeh:sXl7BnB6ez9rg+9/FvSumq
Score

8^/10

discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Queries the mobile country code (MCC)
  discovery
- Registers a broadcast receiver at runtime (usually for listening for system events)
  persistence
- Checks if the internet connection is available
  discovery
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

discoveryevasionimpactpersistence