Overview

overview

8

Static

static

6

SM26_3.7.1.zip

windows10-2004-x64

1

SM26_3.7.1.zip

windows11-ltsc_2024-x64

1

base.apk

android-9-x86

8

base.apk

android-10-x64

8

base.apk

android-11-x64

8

split_Unit...ck.jar

windows10-2004-x64

1

split_Unit...ck.jar

windows11-ltsc_2024-x64

1

split_conf...8a.jar

windows10-2004-x64

1

split_conf...8a.jar

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    SM26_3.7.1.apks
  • Size 331.6MB
  • Sample260717-vchdwsfz2q
  • SHA256 878467c326d60b7d6b1b02a4c57d4d47c21e8cb51a684f70beb9d36c6d15d472
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
androiddefense_evasiondiscoveryevasionexecutionpersistence

Malware Config

Targets

    • Target
      SM26_3.7.1.apks
    • Size 331.6MB
    • SHA256 878467c326d60b7d6b1b02a4c57d4d47c21e8cb51a684f70beb9d36c6d15d472
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      base.apk
    • Size 51.9MB
    • SHA256 c267d452b48130f7ca05a1528739747a7bc3943dc8f7953c5a5027960fe62725
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasiondiscoveryexecutionpersistenceevasion

    • Checks if the Android device is rooted.

      defense_evasion

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Acquires the wake lock

    • Queries information about active data network

      discovery

    • Reads information about phone network operator.

      discovery

    • Checks the presence of a debugger

      defense_evasion
    behavioral3behavioral4behavioral5
    • Target
      split_UnityDataAssetPack.apk
    • Size 766.1MB
    • SHA256 9bb12e7d973a0f4c59b14b8693502f8f385b17d7198952b04309deea87519e0e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral6behavioral7
    • Target
      split_config.arm64_v8a.apk
    • Size 55.6MB
    • SHA256 987124469ffd867fa7f714144c99913a4575563c0b738c0a3718a287fe521f12
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral8behavioral9

MITRE ATT&CK Mobile v16

Tasks