Overview

overview

10

Static

static

10

62bbab5bfa...83.apk

android-9-x86

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    62bbab5bfac8c118a6cbadde76700f1602cd674e1c17d89db7cafb6eefb82283

  • Size

    2.2MB

  • Sample

    240726-djgx9swape

  • MD5

    724c6e623dae2a8ca9d66bf2c8bf0533

  • SHA1

    c22c798060f2cc839c52badc0ba8f88eb4bdb8ab

  • SHA256

    62bbab5bfac8c118a6cbadde76700f1602cd674e1c17d89db7cafb6eefb82283

  • SHA512

    4988071c6dc6a39c68ec26792aa253d9a0b90c8b55877fe1c17440fca8f3ccf4c0cb844c9e27b3ad7cac251f980f99ec8c1867d7bba3c6b0374142ca08ab3279

  • SSDEEP

    49152:Qh9fG52Q1/Dg8YTACD2DoRMM1buoAFh0Vkvz2eyH+rbw:+qX/DwTDFRMM5uo2lb2eyHl

Score
10/10
irataandroiddiscoveryevasionimpactpersistence

Malware Config

Targets

    • Target

      62bbab5bfac8c118a6cbadde76700f1602cd674e1c17d89db7cafb6eefb82283

    • Size

      2.2MB

    • MD5

      724c6e623dae2a8ca9d66bf2c8bf0533

    • SHA1

      c22c798060f2cc839c52badc0ba8f88eb4bdb8ab

    • SHA256

      62bbab5bfac8c118a6cbadde76700f1602cd674e1c17d89db7cafb6eefb82283

    • SHA512

      4988071c6dc6a39c68ec26792aa253d9a0b90c8b55877fe1c17440fca8f3ccf4c0cb844c9e27b3ad7cac251f980f99ec8c1867d7bba3c6b0374142ca08ab3279

    • SSDEEP

      49152:Qh9fG52Q1/Dg8YTACD2DoRMM1buoAFh0Vkvz2eyH+rbw:+qX/DwTDFRMM5uo2lb2eyHl

    Score
    8/10
    discoveryevasionimpactpersistence

    • Checks if the Android device is rooted.

      evasion

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Acquires the wake lock

    • Domain associated with commercial stalkerware software, includes indicators from echap.eu.org

    • Queries information about active data network

      discovery

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

      discovery

    • Queries the mobile country code (MCC)

      discovery

    • Reads information about phone network operator.

      discovery
    behavioral1

MITRE ATT&CK Mobile v15

Tasks