General
- Target B1tTV_v2.1.6_zenith_ NoAds _sign (SFILE.MOBI).apk
- Size 12.5MB
- Sample260621-ts3jbsd13m
- SHA256 8be8011208804057889a68e761b4cb90953d4e5e6171d3b959f494f155744522
Score
8/10
Malware Config
Targets
-
- Target B1tTV_v2.1.6_zenith_ NoAds _sign (SFILE.MOBI).apk
- Size 12.5MB
- SHA256 8be8011208804057889a68e761b4cb90953d4e5e6171d3b959f494f155744522
Score8/10-
Checks if the Android device is rooted.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Checks the presence of a debugger
MITRE ATT&CK Enterprise v16
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1