3e38180af480290c09caf3036b53a6574670971b9c6ff5d7824b57ec3a548342 | Triage

Sharing

General

Target

Spotify v8.9.74.568 [xManager] (Merged).apk
Size

78.9MB
Sample

240920-rmdlxa1dnk
MD5

a7869b7d431be8953773d00f63b62b5a
SHA1

aa405f90c3b452a39fc11bc67edc3070cad053a6
SHA256

3e38180af480290c09caf3036b53a6574670971b9c6ff5d7824b57ec3a548342
SHA512

e515df2c6cb4ee56b32f45440966c6b3ca3fc6ccbe7af24c536b63645ff88e3046f6f295061de5a660346748666457b655e3d0aa54d9d968d104cab02ad68a89
SSDEEP

1572864:550SOdhePEh5IK4s2KGue0tVSHsW+zCMyl6ezUe6yJ4w:5pMnIK1LNe0tUHpiCMXfe6i4w

Score

8^/10

android discovery evasion

Malware Config

Targets

- Target
  
  Spotify v8.9.74.568 [xManager] (Merged).apk
- Size
  
  78.9MB
- MD5
  
  a7869b7d431be8953773d00f63b62b5a
- SHA1
  
  aa405f90c3b452a39fc11bc67edc3070cad053a6
- SHA256
  
  3e38180af480290c09caf3036b53a6574670971b9c6ff5d7824b57ec3a548342
- SHA512
  
  e515df2c6cb4ee56b32f45440966c6b3ca3fc6ccbe7af24c536b63645ff88e3046f6f295061de5a660346748666457b655e3d0aa54d9d968d104cab02ad68a89
- SSDEEP
  
  1572864:550SOdhePEh5IK4s2KGue0tVSHsW+zCMyl6ezUe6yJ4w:5pMnIK1LNe0tUHpiCMXfe6i4w
Score

8^/10

discovery evasion
- Checks if the Android device is rooted.
  evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Acquires the wake lock
- Queries information about active data network
  discovery
- Checks the presence of a debugger
  evasion
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

Process Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion