Overview

overview

8

Static

static

6

ibisPaint_...8a.apk

android-13-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    ibisPaint_X_v14.0.4_Prime_arm64-v8a.apk
  • Size 50.0MB
  • Sample260811-qhjfxstdqc
  • SHA256 995c82547f7d5611a37ec0ce56b36eb21b91f6475dd341173e1436254cef97d6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
androiddefense_evasiondiscoveryevasion

Malware Config

Targets

    • Target
      ibisPaint_X_v14.0.4_Prime_arm64-v8a.apk
    • Size 50.0MB
    • SHA256 995c82547f7d5611a37ec0ce56b36eb21b91f6475dd341173e1436254cef97d6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasiondiscoveryevasion

    • Checks if the Android device is rooted.

      defense_evasion

    • Checks Android system properties for emulator presence.

      defense_evasion

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Queries information about running processes on the device

      Application may abuse the framework's APIs to collect information about running processes on the device.

      discovery

    • Checks the presence of a debugger

      defense_evasion
    behavioral1

MITRE ATT&CK Mobile v16

Tasks