Overview

overview

7

Static

static

6

Cihiro AimBot (1).apk

android-14-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    Cihiro AimBot (1).apk
  • Size 3.3MB
  • Sample260913-lebjpafj81
  • SHA256 6906860c8fc265b48539dd8f46d65d558f032ea89a172b1fb10054f94115f328
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
androidbankercollectioncredential_accessdefense_evasiondiscoveryevasionimpact

Malware Config

Targets

    • Target
      Cihiro AimBot (1).apk
    • Size 3.3MB
    • SHA256 6906860c8fc265b48539dd8f46d65d558f032ea89a172b1fb10054f94115f328
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    bankercollectioncredential_accessdefense_evasiondiscoveryevasionimpact

    • Checks Android system properties for emulator presence.

      defense_evasion

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

      evasion

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

      collectioncredential_accessimpact

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Declares services with permission to bind to the system

    • Requests dangerous framework permissions

    behavioral1

MITRE ATT&CK Mobile v16

Tasks