bc312fdf8238e23a984fd1e072b1b83632828a7c3912de0a758cbbae798b5009 | Triage

Sharing

General

Target

zlibrary-app-latest.apk
Size

31.5MB
Sample

240726-3wwdvssgjq
MD5

3d46adfd3550c95950458a4e85e893d4
SHA1

bcd75ef38aa5a13038f5c2f469f298de6517a933
SHA256

bc312fdf8238e23a984fd1e072b1b83632828a7c3912de0a758cbbae798b5009
SHA512

1fb0bc5ab44112c660a08a84f6be611f20f5e135c6c0c43c2afde9f11073c47443e96afa0abbb76fb2f6456eedcd30e83ae4f41f01c58bd964e02f299bd4a186
SSDEEP

786432:XHt3EmyGwIv9/xZljhHtKAxH0MKm85Fut3bRajyTlOKKRMSA:XHt3EXGwQ9/56rM78ayjy5O72SA

Score

8^/10

android discovery evasion persistence

Malware Config

Targets

- Target
  
  zlibrary-app-latest.apk
- Size
  
  31.5MB
- MD5
  
  3d46adfd3550c95950458a4e85e893d4
- SHA1
  
  bcd75ef38aa5a13038f5c2f469f298de6517a933
- SHA256
  
  bc312fdf8238e23a984fd1e072b1b83632828a7c3912de0a758cbbae798b5009
- SHA512
  
  1fb0bc5ab44112c660a08a84f6be611f20f5e135c6c0c43c2afde9f11073c47443e96afa0abbb76fb2f6456eedcd30e83ae4f41f01c58bd964e02f299bd4a186
- SSDEEP
  
  786432:XHt3EmyGwIv9/xZljhHtKAxH0MKm85Fut3bRajyTlOKKRMSA:XHt3EXGwQ9/56rM78ayjy5O72SA
Score

8^/10

discovery evasion persistence
- Checks if the Android device is rooted.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
- Checks the presence of a debugger
  evasion
behavioral1 behavioral2

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2