Overview

overview

8

Static

static

6

Parental C...re.apk

android-13-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    Parental Control - Kidslox_9.4.0_APKPure.apk

  • Size

    77.3MB

  • Sample

    240604-tk2basch96

  • MD5

    a80035b177f1502febbc1f1accf795b9

  • SHA1

    a3a1d8a8f74718f65ab7dc5f4ec6cca150bfdae6

  • SHA256

    d1e03636db51495e82e37a0ac8c39a0e0d8e1a0295ea0373ef650f5aabee7f4e

  • SHA512

    9d0da865a97277ae97515ec7c89595946d55bc5ff329029b7dba3aca93c594584b235f286889566994b93a0bb9ce089743f622c41b340f584a142f20d2eb3ca3

  • SSDEEP

    786432:7Lr3IQBPahpWYqHXvGIwKX4ZTY7smtf96g4B9BsrC2m/SRZfNwpuxa1/:XzBaOfwUQWhrC76OpLR

Score
8/10
androidbankerdiscoveryevasionexecutionimpactpersistence

Malware Config

Targets

    • Target

      Parental Control - Kidslox_9.4.0_APKPure.apk

    • Size

      77.3MB

    • MD5

      a80035b177f1502febbc1f1accf795b9

    • SHA1

      a3a1d8a8f74718f65ab7dc5f4ec6cca150bfdae6

    • SHA256

      d1e03636db51495e82e37a0ac8c39a0e0d8e1a0295ea0373ef650f5aabee7f4e

    • SHA512

      9d0da865a97277ae97515ec7c89595946d55bc5ff329029b7dba3aca93c594584b235f286889566994b93a0bb9ce089743f622c41b340f584a142f20d2eb3ca3

    • SSDEEP

      786432:7Lr3IQBPahpWYqHXvGIwKX4ZTY7smtf96g4B9BsrC2m/SRZfNwpuxa1/:XzBaOfwUQWhrC76OpLR

    Score
    8/10
    bankerdiscoveryevasionexecutionimpactpersistence

    • Checks if the Android device is rooted.

      evasion

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Acquires the wake lock

    • Queries information about active data network

      discovery

    • Queries the mobile country code (MCC)

      discovery

    • Reads information about phone network operator.

      discovery

    • Checks the presence of a debugger

      evasion

    • Listens for changes in the sensor environment (might be used to detect emulation)

      evasion
    behavioral1

MITRE ATT&CK Mobile v15

Tasks