Extracted

• • Target
    35d220d4bfeec29b788e018405b60f42f63d8003ba673a09465b2be8a0456667.apk
  • Size 977KB
  • SHA256 35d220d4bfeec29b788e018405b60f42f63d8003ba673a09465b2be8a0456667
  • MD5 0b6bba44736962066c6a563a90b832fb
  • SHA1 03c636c614a88dcc68e6b5c2ebc2bb1080b6cd36
  • SHA512 1c1247cf8aec11607350a0c1ac49aa1224d367e1bd87a42986830444ee32ec06f5bd1418d92a652f48f9a2fd539c17aa0c39abe2f24f3b3c9e917946eb91335d
  • SSDEEP 24576:vJbBXBgfDQlDiZYEQZyZaK4pvyBRKDLRLKDLRAT:vVBRg7QlDiuOavoeHROHRG
  • TLSH
    T1632533C672E5F683D7302E32ED68FFB55B24A74E5654162A3C22E5395ECC3103292CD6
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  botnetdefense_evasionexecutionmiraipersistenceevasion

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Acquires the wake lock

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    defense_evasion
  behavioral1behavioral2behavioral3