6bdc3126542c9c1b42d2b8f236b90b09a9b0bebf54d977553751e674d617025c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

minecraft-1-19-10-03-xbox-servers.apk
Size

155.5MB
Sample

240708-x9zqjsxepf
MD5

c7c5048958408ec91d3f1646143d4129
SHA1

b501de1aa42a755401ac20efc2ed6433b1083e67
SHA256

6bdc3126542c9c1b42d2b8f236b90b09a9b0bebf54d977553751e674d617025c
SHA512

6e9727e721f2ec0e3cbff52c18be3c14b6e2045373ace717814303377564c719a1b889c363249ede508de7bb07ae0a252adf1dcc02ee0c82ce01155065cdd036
SSDEEP

3145728:w6viBR/MzwahbZ2RGiMshbZOvGlsA2qHn79EK830QNmwE1fjV2nk667eifn:wFH/Mzw8bcRGiv9QvzqHnWowE1fjV2kb

Score

8^/10

android collection discovery evasion impact persistence

Malware Config

Targets

- Target
  
  minecraft-1-19-10-03-xbox-servers.apk
- Size
  
  155.5MB
- MD5
  
  c7c5048958408ec91d3f1646143d4129
- SHA1
  
  b501de1aa42a755401ac20efc2ed6433b1083e67
- SHA256
  
  6bdc3126542c9c1b42d2b8f236b90b09a9b0bebf54d977553751e674d617025c
- SHA512
  
  6e9727e721f2ec0e3cbff52c18be3c14b6e2045373ace717814303377564c719a1b889c363249ede508de7bb07ae0a252adf1dcc02ee0c82ce01155065cdd036
- SSDEEP
  
  3145728:w6viBR/MzwahbZ2RGiMshbZOvGlsA2qHn79EK830QNmwE1fjV2nk667eifn:wFH/Mzw8bcRGiv9QvzqHnWowE1fjV2kb
Score

8^/10

collection discovery evasion impact persistence
- Checks if the Android device is rooted.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries account information for other applications stored on the device
  Application may abuse the framework's APIs to collect account information stored on the device.
  collection
- Acquires the wake lock
- Queries information about active data network
  discovery
- Reads information about phone network operator.
  discovery
- Listens for changes in the sensor environment (might be used to detect emulation)
  evasion
behavioral1 behavioral2 behavioral3 behavioral4 behavioral5

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Hide Artifacts

User Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Stored Application Data

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

collectiondiscoveryevasionimpact

behavioral4

behavioral5

collectiondiscoveryevasionimpactpersistence