General

  • Target

    com_spotify_music_v8.9.78.513.apk

  • Size

    65.2MB

  • Sample

    241001-r5d1dsvdlm

  • MD5

    f5af75d56787e050bd395a14dcea8895

  • SHA1

    987202a0822e6348920c6aff131ddb996290d963

  • SHA256

    52b59f14cba06e50cd24d73e85bc459933fb6db04e1777dc20c0683042a7116d

  • SHA512

    9a8eb1331175eb9c223c8e1fc536f5fc693cfc72677d870ac9d22af6c88d6a08903baac833ce00b0a7039145eeacc2638e976f087890f5023236b9d9b2166122

  • SSDEEP

    393216:wdHImk4Xp8+quwSh8OnVdicrlASXNdDfKEkd0S1vvOqIB:0pTpPLRAuNlfmd3HOzB

Malware Config

Targets

    • Target

      com_spotify_music_v8.9.78.513.apk

    • Size

      65.2MB

    • MD5

      f5af75d56787e050bd395a14dcea8895

    • SHA1

      987202a0822e6348920c6aff131ddb996290d963

    • SHA256

      52b59f14cba06e50cd24d73e85bc459933fb6db04e1777dc20c0683042a7116d

    • SHA512

      9a8eb1331175eb9c223c8e1fc536f5fc693cfc72677d870ac9d22af6c88d6a08903baac833ce00b0a7039145eeacc2638e976f087890f5023236b9d9b2166122

    • SSDEEP

      393216:wdHImk4Xp8+quwSh8OnVdicrlASXNdDfKEkd0S1vvOqIB:0pTpPLRAuNlfmd3HOzB

    • Checks if the Android device is rooted.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

    • Acquires the wake lock

    • Queries information about active data network

    • Checks the presence of a debugger

    • Listens for changes in the sensor environment (might be used to detect emulation)

MITRE ATT&CK Mobile v15

Tasks