General
- Target b34cfeec76b6359e849f92003e2df6d756a46a2c73ea4c334becb7b53bd9eaa8.apk
- Size 14.1MB
- Sample260818-wtbs4sxfmh
- SHA256 b34cfeec76b6359e849f92003e2df6d756a46a2c73ea4c334becb7b53bd9eaa8
Score
10/10
Malware Config
Targets
-
- Target b34cfeec76b6359e849f92003e2df6d756a46a2c73ea4c334becb7b53bd9eaa8.apk
- Size 14.1MB
- SHA256 b34cfeec76b6359e849f92003e2df6d756a46a2c73ea4c334becb7b53bd9eaa8
Score9/10- Custom signature
Root, emulator and instrumentation-framework detection
Probes for superuser binaries, emulator build properties and dynamic instrumentation frameworks. Malware uses these checks to stay dormant inside analysis environments, so a sample matching this rule with an otherwise empty behavioural report should be treated as evasive rather than benign.
Checks if the Android device is rooted.
Checks Android system properties for emulator presence.
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
Queries information about active data network
Reads information about phone network operator.
Requests accessing notifications (often used to intercept notifications before users become aware).
Listens for changes in the sensor environment (might be used to detect emulation)
MITRE ATT&CK Mobile v16
Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
2System Checks
2