Overview

overview

8

Static

static

6

com.easyte...ms.apk

android-9-x86

8

com.easyte...ms.apk

android-10-x64

8

com.easyte...ms.apk

android-11-x64

8

config.arm64_v8a.jar

windows10-2004-x64

1

config.arm64_v8a.jar

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    com.easytexting.messagingme.sms_1.46.xapk
  • Size 27.6MB
  • Sample260803-gl3vasch38
  • SHA256 36cefed9bdb1d3c2bdc91aca29ba6f8b06002019ef6432df922a106acf371177
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
androidcollectioncredential_accessdefense_evasiondiscoveryevasionexecutionimpactpersistence

Malware Config

Targets

    • Target
      com.easytexting.messagingme.sms.apk
    • Size 27.5MB
    • SHA256 9dd592d5188c33ed3e54daec297cc05c3d01f03ebc61ee34465535611be369af
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasiondiscoveryevasionexecutionpersistencecollectioncredential_accessimpact

    • Checks if the Android device is rooted.

      defense_evasion

    • Checks Android system properties for emulator presence.

      defense_evasion

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

      collectioncredential_accessimpact

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Queries information about active data network

      discovery

    • Queries the mobile country code (MCC)

      discovery

    • Reads information about phone network operator.

      discovery

    • Checks the presence of a debugger

      defense_evasion

    • Listens for changes in the sensor environment (might be used to detect emulation)

      defense_evasion
    behavioral1behavioral2behavioral3
    • Target
      config.arm64_v8a.apk
    • Size 40KB
    • SHA256 fa50900ade72315542e7fc1ed766442bfd9612b4f69a922bfbc199cf2d15c312
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral4behavioral5

MITRE ATT&CK Mobile v16

Tasks