smsworm | a2e9da586411cee6f15412ed34ae8b5f3e324fbe94cb78ae3e1354a612d872f2 | Triage

Sharing

General

Target

Headshot GFX Tool and Sensitivity settings Guide_1.0_APKPure.apk
Size

12.4MB
Sample

240702-qqnqlsycmk
MD5

309805380808ec8d85f86f52896ada7d
SHA1

2cc9c613563340811e6b28a8eb43059bbea771dc
SHA256

a2e9da586411cee6f15412ed34ae8b5f3e324fbe94cb78ae3e1354a612d872f2
SHA512

35cb1779456948bfc28b8076ab922e98bc6c334ad6756e017191b7597875cda7cc6d950d2959c3aa31406003452d5dc0f64f55bd37eb08277021d76ad6838529
SSDEEP

196608:alzv9hMPEPLA4HdM4fk9Cnc23XznqugNLCjc0V1Dl08wnR1vQMQ6SWlYq:MX9PLVHdw0ncODJgNL0PLDyvtSWh

Score

10^/10

smsworm android discovery evasion impact persistence

Malware Config

Targets

- Target
  
  Headshot GFX Tool and Sensitivity settings Guide_1.0_APKPure.apk
- Size
  
  12.4MB
- MD5
  
  309805380808ec8d85f86f52896ada7d
- SHA1
  
  2cc9c613563340811e6b28a8eb43059bbea771dc
- SHA256
  
  a2e9da586411cee6f15412ed34ae8b5f3e324fbe94cb78ae3e1354a612d872f2
- SHA512
  
  35cb1779456948bfc28b8076ab922e98bc6c334ad6756e017191b7597875cda7cc6d950d2959c3aa31406003452d5dc0f64f55bd37eb08277021d76ad6838529
- SSDEEP
  
  196608:alzv9hMPEPLA4HdM4fk9Cnc23XznqugNLCjc0V1Dl08wnR1vQMQ6SWlYq:MX9PLVHdw0ncODJgNL0PLDyvtSWh
Score

8^/10

discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Acquires the wake lock
- Queries information about active data network
  discovery
behavioral1 behavioral2

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

Process Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

discoveryevasionimpactpersistence

behavioral2

discoveryevasionimpact