General
- Target a0d971c838c7150c53aa2cefbda7642195a7885c4e0fd1353cdb9ef7ec27bd30.apk
- Size 24.0MB
- Sample260820-nfc51sbj6v
- SHA256 a0d971c838c7150c53aa2cefbda7642195a7885c4e0fd1353cdb9ef7ec27bd30
Score
10/10
Malware Config
Targets
-
- Target a0d971c838c7150c53aa2cefbda7642195a7885c4e0fd1353cdb9ef7ec27bd30.apk
- Size 24.0MB
- SHA256 a0d971c838c7150c53aa2cefbda7642195a7885c4e0fd1353cdb9ef7ec27bd30
Score9/10-
Root, emulator and instrumentation-framework detection
Probes for superuser binaries, emulator build properties and dynamic instrumentation frameworks. Malware uses these checks to stay dormant inside analysis environments, so a sample matching this rule with an otherwise empty behavioural report should be treated as evasive rather than benign.
-
Checks if the Android device is rooted.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock
-
Queries information about active data network
-
Reads information about phone network operator.
-
Checks the presence of a debugger