General

  • Target
    260623-atb8zshv14_pw_infected.zip
  • Size 7.7MB
  • Sample260624-bp7prshx4k
  • SHA256 011747e761a849c18e4547bdc3b8c50c70a3bab59af1ad6dc9169da7bc035acf
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      4e2cbefc6bdbfdb6e885057ce47d460e3d3355a5e97db51b22e9c5a14e14302b
    • Size 11.0MB
    • SHA256 4e2cbefc6bdbfdb6e885057ce47d460e3d3355a5e97db51b22e9c5a14e14302b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks known Qemu pipes.

      Checks for known pipes used by the Android emulator to communicate with the host.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Queries information about active data network

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Mobile v16

Tasks