Overview

overview

8

Static

static

8

elephtvmob...pk.apk

android-15-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    elephtvmob_ModYolo-apk.apk
  • Size 38.0MB
  • Sample260707-mem36afx51
  • SHA256 79481f3871f03f18f6aef8d7d16ec0e7c86d8c2175e68fba041428242c4170b9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
androiddefense_evasionupx

Malware Config

Targets

    • Target
      elephtvmob_ModYolo-apk.apk
    • Size 38.0MB
    • SHA256 79481f3871f03f18f6aef8d7d16ec0e7c86d8c2175e68fba041428242c4170b9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasionupx

    • Patched UPX-packed file

      Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

    • Checks Android system properties for emulator presence.

      defense_evasion

    • Checks Qemu related system properties.

      Checks for Android system properties related to Qemu for Emulator detection.

      defense_evasion

    • Checks known Qemu pipes.

      Checks for known pipes used by the Android emulator to communicate with the host.

      defense_evasion

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Mobile v16

Tasks