Overview

overview

7

Static

static

6

zemzeme-fo...1).apk

android-13-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    zemzeme-foss-arm64-v8a.apk-signed (1).apk
  • Size 46.2MB
  • Sample261013-rayfjses9y
  • SHA256 7a7ec7f1d3bf3789bc5e345afca38da3b7ce7a3dce673d679ba34a2d47b2f097
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
androidcollectioncredential_accessdefense_evasionimpactpersistence

Malware Config

Targets

    • Target
      zemzeme-foss-arm64-v8a.apk-signed (1).apk
    • Size 46.2MB
    • SHA256 7a7ec7f1d3bf3789bc5e345afca38da3b7ce7a3dce673d679ba34a2d47b2f097
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    collectioncredential_accessdefense_evasionimpactpersistence

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

      collectioncredential_accessimpact

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

      defense_evasionpersistence
    behavioral1

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Tasks