Overview

overview

7

Static

static

6

plpetrosof...27.apk

android-13-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    plpetrosoftrailsmobile_30293527.apk
  • Size 13.7MB
  • Sample261007-w798tses4l
  • SHA256 e720e76ebde4ddd5666e615a6d29273158f84e9af8a531762a58193f810b6d58
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
androidbankerdefense_evasiondiscoverypersistence

Malware Config

Targets

    • Target
      plpetrosoftrailsmobile_30293527.apk
    • Size 13.7MB
    • SHA256 e720e76ebde4ddd5666e615a6d29273158f84e9af8a531762a58193f810b6d58
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    bankerdefense_evasiondiscoverypersistence

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Acquires the wake lock

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

      defense_evasionpersistence

    • Queries information about active data network

      discovery

    • Listens for changes in the sensor environment (might be used to detect emulation)

      defense_evasion
    behavioral1

MITRE ATT&CK Mobile v16

Tasks