General

  • Target
    Service Update.apk
  • Size 1.1MB
  • Sample260708-dl8trsh14s
  • SHA256 aaaa89488caf328bea8e56fa95cae69124a561ec97594b686c93cfdd24f13e96
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Service Update.apk
    • Size 1.1MB
    • SHA256 aaaa89488caf328bea8e56fa95cae69124a561ec97594b686c93cfdd24f13e96
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Checks if the Android device is rooted.

    • Acquires the wake lock

    • Declares broadcast receivers with permission to handle system events

    • Declares services with permission to bind to the system

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

    • Requests dangerous framework permissions

MITRE ATT&CK Mobile v16

Tasks