76436b564cd850dc70f93b9943557fdacaf3bc835e8a19d141c945d986453db2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

sample
Size

20KB
Sample

240530-3ym59sga49
MD5

20845b7732041f0d3ea8cfc255979050
SHA1

1e59ef2afd2cea1070f63670ae3b7ee8b225b485
SHA256

76436b564cd850dc70f93b9943557fdacaf3bc835e8a19d141c945d986453db2
SHA512

6e1ee91d650b91d08a1f26b17b39a7c3935d406b4cb7bae8266dbf8714fc7262127634c904d683175a8eba38f9502e991b01a0d3ce505c59ef10def846a178be
SSDEEP

384:rHp4eDpmReVoOs4bi9ylKeGMQUhHhhbHRR2l7Cu28zo2paWhOwob05Bz+Es28JCx:rJ4eBVoOs4bmyI1MHBhbx23eWhOwob0h

Score

7^/10

android discovery evasion

Malware Config

Targets

- Target
  
  sample
- Size
  
  20KB
- MD5
  
  20845b7732041f0d3ea8cfc255979050
- SHA1
  
  1e59ef2afd2cea1070f63670ae3b7ee8b225b485
- SHA256
  
  76436b564cd850dc70f93b9943557fdacaf3bc835e8a19d141c945d986453db2
- SHA512
  
  6e1ee91d650b91d08a1f26b17b39a7c3935d406b4cb7bae8266dbf8714fc7262127634c904d683175a8eba38f9502e991b01a0d3ce505c59ef10def846a178be
- SSDEEP
  
  384:rHp4eDpmReVoOs4bi9ylKeGMQUhHhhbHRR2l7Cu28zo2paWhOwob05Bz+Es28JCx:rJ4eBVoOs4bmyI1MHBhbx23eWhOwob0h
Score

7^/10

discovery evasion
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion