General

  • Target

    com.pret.android_2024-06-07.apk

  • Size

    32.2MB

  • Sample

    240702-wjxmtsycmr

  • MD5

    640d08626eca3b68a2e722b372423c56

  • SHA1

    651aa91c4414628a304eca63b5d5fa916591bec8

  • SHA256

    f62b22c9ba1494c43b4b223dd11e01ba91636f1b8adb7a903acd96c5ae288350

  • SHA512

    90aad2b8d15edf28fe66145e88abaca2154c14942ff2c7db46627314e6134ae4350c132cfe73864d1411d35328eaa7c6d47ee0f62f57781c29d011eb7df5aeb7

  • SSDEEP

    786432:MULH4GH7LdaGr1ngaY9tm44p3jW84lUEknOvJjcaSZ:v9H8O1ngaY9odE84Ietk

Malware Config

Targets

    • Target

      com.pret.android_2024-06-07.apk

    • Size

      32.2MB

    • MD5

      640d08626eca3b68a2e722b372423c56

    • SHA1

      651aa91c4414628a304eca63b5d5fa916591bec8

    • SHA256

      f62b22c9ba1494c43b4b223dd11e01ba91636f1b8adb7a903acd96c5ae288350

    • SHA512

      90aad2b8d15edf28fe66145e88abaca2154c14942ff2c7db46627314e6134ae4350c132cfe73864d1411d35328eaa7c6d47ee0f62f57781c29d011eb7df5aeb7

    • SSDEEP

      786432:MULH4GH7LdaGr1ngaY9tm44p3jW84lUEknOvJjcaSZ:v9H8O1ngaY9odE84Ietk

    • Checks if the Android device is rooted.

    • Checks Android system properties for emulator presence.

    • Checks Qemu related system properties.

      Checks for Android system properties related to Qemu for Emulator detection.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Acquires the wake lock

    • Queries information about active data network

    • Reads information about phone network operator.

    • Checks the presence of a debugger

    • Listens for changes in the sensor environment (might be used to detect emulation)

MITRE ATT&CK Mobile v15

Tasks