abeae591136f4eee8ca8e4a73cc831337ee565ed4b0823c00bab6953a6d04a36 | Triage

Sharing

General

Target

Spotify_v8.10.9.722_Premium_modspoti.com.apk
Size

76.6MB
Sample

241002-yxgvmsxgkb
MD5

661b2adea15a6cad86a4209d5608647a
SHA1

5e4c60fe064fd28bf30ab9d40cef014ca8f78da3
SHA256

abeae591136f4eee8ca8e4a73cc831337ee565ed4b0823c00bab6953a6d04a36
SHA512

842f7451d754ef9a142911efb059d9b31c847a0d6ae8e6d923ced75e54d0c82525d82e9d1d62f37c1ab7e808ec9c7b95c505aed89b7fcaba0e97c5e447b5fc81
SSDEEP

1572864:amjGTbOL5hX+KqupgGZYB5B94FFJdVczXDjA:9kiL5ltlpLZYcBdVaXDjA

Score

8^/10

android discovery evasion persistence

Malware Config

Targets

- Target
  
  Spotify_v8.10.9.722_Premium_modspoti.com.apk
- Size
  
  76.6MB
- MD5
  
  661b2adea15a6cad86a4209d5608647a
- SHA1
  
  5e4c60fe064fd28bf30ab9d40cef014ca8f78da3
- SHA256
  
  abeae591136f4eee8ca8e4a73cc831337ee565ed4b0823c00bab6953a6d04a36
- SHA512
  
  842f7451d754ef9a142911efb059d9b31c847a0d6ae8e6d923ced75e54d0c82525d82e9d1d62f37c1ab7e808ec9c7b95c505aed89b7fcaba0e97c5e447b5fc81
- SSDEEP
  
  1572864:amjGTbOL5hX+KqupgGZYB5B94FFJdVczXDjA:9kiL5ltlpLZYcBdVaXDjA
Score

8^/10

discovery evasion persistence
- Checks if the Android device is rooted.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Acquires the wake lock
- Queries information about active data network
  discovery
- Checks the presence of a debugger
  evasion
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

Process Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence