Overview

overview

9

Static

static

1

Among Impo....7.apk

android-9-x86

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    Among Impostor 0.7.apk
  • Size 39.8MB
  • Sample240609-rhbazsca84
  • SHA256 af95b970e63a251e52ca53156d0eef952115d5c7f65d01d27e5ea9a62d2b4100
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10
androiddiscoveryevasionimpactpersistenceransomware

Malware Config

Targets

    • Target
      Among Impostor 0.7.apk
    • Size 39.8MB
    • SHA256 af95b970e63a251e52ca53156d0eef952115d5c7f65d01d27e5ea9a62d2b4100
    • MD5 SHA1 SHA512 SSDEEP
    Score
    9/10
    discoveryevasionimpactpersistenceransomware

    • Renames multiple (51) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Checks if the Android device is rooted.

      evasion

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Queries information about active data network

      discovery

    • Queries the mobile country code (MCC)

      discovery
    behavioral1

MITRE ATT&CK Mobile v15

Tasks