triada | e31a9bce6dd93cc4782df79e8694907e6af96123d4457793054ca754bb61991e | Triage

Sharing

General

Target

e31a9bce6dd93cc4782df79e8694907e6af96123d4457793054ca754bb61991e.apk
Size

86.7MB
Sample

250106-dsyx5sxjcq
MD5

c6853d19fcf29b23c4d73a527d0c6926
SHA1

3fbd8503c12f5057c9ad4386c5bda13f6297d6c0
SHA256

e31a9bce6dd93cc4782df79e8694907e6af96123d4457793054ca754bb61991e
SHA512

d7a2bf00353f256e94d958b60ed3a1dda1d4b9353f9459ef6aa4e646b4c3573d1cfcc5badc027109c4d32c919dd818ffb2065d9d444054c451736ec1c9c1548a
SSDEEP

1572864:u4jTgH9ojBGXHqzDExuKuScdctX5vllAU9h1UWz4yldV:6dojAKzIuKbcYX5teuA1wL

Score

10^/10

triada android discovery persistence

Malware Config

Targets

- Target
  
  e31a9bce6dd93cc4782df79e8694907e6af96123d4457793054ca754bb61991e.apk
- Size
  
  86.7MB
- MD5
  
  c6853d19fcf29b23c4d73a527d0c6926
- SHA1
  
  3fbd8503c12f5057c9ad4386c5bda13f6297d6c0
- SHA256
  
  e31a9bce6dd93cc4782df79e8694907e6af96123d4457793054ca754bb61991e
- SHA512
  
  d7a2bf00353f256e94d958b60ed3a1dda1d4b9353f9459ef6aa4e646b4c3573d1cfcc5badc027109c4d32c919dd818ffb2065d9d444054c451736ec1c9c1548a
- SSDEEP
  
  1572864:u4jTgH9ojBGXHqzDExuKuScdctX5vllAU9h1UWz4yldV:6dojAKzIuKbcYX5teuA1wL
Score

6^/10

discovery persistence
- Acquires the wake lock
- Legitimate hosting services abused for malware hosting/C2
- Queries information about active data network
  discovery
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence