General
- Target Cloud Cutter_2.0_APKPure.xapk
- Size 4.8MB
- Sample260930-lfxtbabf76
- SHA256 6051a59750909b04ec462ad134f784c8ffc01da1749e386a4becc36ee5902ad5
Score
8/10
Malware Config
Targets
-
- Target com.ea.game.pvz2_.apk
- Size 4.0MB
- SHA256 753c3f4b3207b8476f6a680e64de5d0145563409323a33de7b8237570ca81494
Score8/10-
Checks if the Android device is rooted.
-
Checks Android system properties for emulator presence.
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Obtains sensitive information copied to the device clipboard
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries the mobile country code (MCC)
-
Reads information about phone network operator.
-
Checks the presence of a debugger
-
Listens for changes in the sensor environment (might be used to detect emulation)
MITRE ATT&CK Mobile v16
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
3System Checks
3