Overview

overview

8

Static

static

6

VirusShare...96.apk

android-9-x86

8

VirusShare...96.apk

android-10-x64

8

VirusShare...96.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    VirusShare_d597de85a073d1ba7bf1c1a82e6e0f96

  • Size

    212KB

  • Sample

    240610-md5ltagd52

  • MD5

    d597de85a073d1ba7bf1c1a82e6e0f96

  • SHA1

    ca3991052eec4161130ae60ec1de5147caf62b5c

  • SHA256

    dab0847dbb9f33aadc8cca8f62eecb3124d2556148a845ffea35214a79135293

  • SHA512

    549ca8fa866eaac0653c8834aed2036392de7afa4d124fd046b471d4798b3f0411d07bf74f1cb57ffc3a3a36862f8b6819c15dbd948c32a477052d7786bb6b2c

  • SSDEEP

    3072:w2d6c4Qmj7xv+UWbYFmN2yacC2l7n65X9SJhfAK+VpgzlmuUVbDsdW2MyiJ4rRXQ:wM6MUWbYfcFle5cvfkpgz1UVDenPLBM

Score
8/10
androiddiscoveryevasionpersistencestealthtrojan

Malware Config

Targets

    • Target

      VirusShare_d597de85a073d1ba7bf1c1a82e6e0f96

    • Size

      212KB

    • MD5

      d597de85a073d1ba7bf1c1a82e6e0f96

    • SHA1

      ca3991052eec4161130ae60ec1de5147caf62b5c

    • SHA256

      dab0847dbb9f33aadc8cca8f62eecb3124d2556148a845ffea35214a79135293

    • SHA512

      549ca8fa866eaac0653c8834aed2036392de7afa4d124fd046b471d4798b3f0411d07bf74f1cb57ffc3a3a36862f8b6819c15dbd948c32a477052d7786bb6b2c

    • SSDEEP

      3072:w2d6c4Qmj7xv+UWbYFmN2yacC2l7n65X9SJhfAK+VpgzlmuUVbDsdW2MyiJ4rRXQ:wM6MUWbYfcFle5cvfkpgz1UVDenPLBM

    Score
    8/10
    discoveryevasionpersistencestealthtrojan

    • Removes its main activity from the application launcher

      stealthtrojanevasion

    • Queries the phone number (MSISDN for GSM devices)

      discovery

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

      evasionpersistence

    • Queries the unique device ID (IMEI, MEID, IMSI)

      discovery

    • Reads information about phone network operator.

      discovery
    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks