General
- Target Aliucord.apk
- Size 110.8MB
- Sample240618-s52bcstgmk
- SHA256 bfa2fd5ac16c58752f19d6f6800ad09c87f5b4d62cb67c167a4e23158506aafc
Score
8/10
Malware Config
Targets
-
- Target Aliucord.apk
- Size 110.8MB
- SHA256 bfa2fd5ac16c58752f19d6f6800ad09c87f5b4d62cb67c167a4e23158506aafc
Score8/10Checks if the Android device is rooted.
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
Reads the content of photos stored on the user's device.
Acquires the wake lock
Legitimate hosting services abused for malware hosting/C2
Makes use of the framework's foreground persistence service
Application may abuse the framework's foreground service to continue running in the foreground.
Queries information about active data network
Checks the presence of a debugger
MITRE ATT&CK Enterprise v15
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Foreground Persistence
1Defense Evasion
Download New Code at Runtime
1Foreground Persistence
1Virtualization/Sandbox Evasion
1System Checks
1