General

  • Target

    Wifi Analyzer Classic_v3.11.1-L_apkpure.com.apk

  • Size

    1.8MB

  • Sample

    240524-n3sh8agg21

  • MD5

    169a3403d6ef6bf4d8feb752b284b136

  • SHA1

    fb1105722e55f95867bce581708c43ee72d9fe70

  • SHA256

    86d9417e304ce6735e9fe0a8559c44f6e9e82c6b06323b45972ee1ca0f5b545d

  • SHA512

    be03f9ed81625b8e23bb4076c520ee8e70980221a797450209b4eddfbeb4a15e3674f7349c7d3adfce9e0b9dab33fb66ed3437729f9d22220c7aab19260f8a49

  • SSDEEP

    24576:Y32OJplhdEbMj+4CnVHndkCGawEx08htZu0N/tU026WJFUR6ssGM4SXv1/MvrKtY:EJplvafsawyDtZrN/a02XARv6ED

Malware Config

Targets

    • Target

      Wifi Analyzer Classic_v3.11.1-L_apkpure.com.apk

    • Size

      1.8MB

    • MD5

      169a3403d6ef6bf4d8feb752b284b136

    • SHA1

      fb1105722e55f95867bce581708c43ee72d9fe70

    • SHA256

      86d9417e304ce6735e9fe0a8559c44f6e9e82c6b06323b45972ee1ca0f5b545d

    • SHA512

      be03f9ed81625b8e23bb4076c520ee8e70980221a797450209b4eddfbeb4a15e3674f7349c7d3adfce9e0b9dab33fb66ed3437729f9d22220c7aab19260f8a49

    • SSDEEP

      24576:Y32OJplhdEbMj+4CnVHndkCGawEx08htZu0N/tU026WJFUR6ssGM4SXv1/MvrKtY:EJplvafsawyDtZrN/a02XARv6ED

    • Checks if the Android device is rooted.

    • Checks Android system properties for emulator presence.

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Checks memory information

      Checks memory information which indicate if the system is an emulator.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Queries information about the current nearby Wi-Fi networks

      Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

    • Queries the mobile country code (MCC)

    • Registers a broadcast receiver at runtime (usually for listening for system events)

MITRE ATT&CK Matrix

Tasks