6c9454fc045130abb77698186eeaed6ff9b274676847043842037983cc83c271 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Downloading app.revanced.android.youtube
Size

158.4MB
Sample

250508-redxpsvjw6
MD5

1b78ae5bc78c78c60eddfd2f2ad5a212
SHA1

8936464ac34272cbac97472dddb6af9dd09083b6
SHA256

6c9454fc045130abb77698186eeaed6ff9b274676847043842037983cc83c271
SHA512

2bd171651210dc040b7fd488e1280c30723512191c6d5e33b8f9c3e213203a7b706ca79e7fc8df29a7344b216b05c45fc70d33b1d93aa722471118667abb95df
SSDEEP

3145728:TqAm3IWkiAx+B7w0IMOztxHmiXbxosDTIHRYHws+UBIFAJnOVbv4aqltu1C:T2VkiAxs7tERxGiXtosD8xCZiimMlg8

Score

8^/10

android defense_evasion discovery evasion execution impact persistence

Malware Config

Targets

- Target
  
  Downloading app.revanced.android.youtube
- Size
  
  158.4MB
- MD5
  
  1b78ae5bc78c78c60eddfd2f2ad5a212
- SHA1
  
  8936464ac34272cbac97472dddb6af9dd09083b6
- SHA256
  
  6c9454fc045130abb77698186eeaed6ff9b274676847043842037983cc83c271
- SHA512
  
  2bd171651210dc040b7fd488e1280c30723512191c6d5e33b8f9c3e213203a7b706ca79e7fc8df29a7344b216b05c45fc70d33b1d93aa722471118667abb95df
- SSDEEP
  
  3145728:TqAm3IWkiAx+B7w0IMOztxHmiXbxosDTIHRYHws+UBIFAJnOVbv4aqltu1C:T2VkiAxs7tERxGiXtosD8xCZiimMlg8
Score

8^/10

discovery execution impact persistence defense_evasion evasion
- Checks if the Android device is rooted.
  defense_evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Acquires the wake lock
- Queries information about active data network
  discovery
- Queries the mobile country code (MCC)
  discovery
behavioral1 behavioral2

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

Persistence

Event Triggered Execution

Broadcast Receivers

Scheduled Task/Job

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Credential Access

Discovery

Process Discovery

System Information Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Tasks

static1

behavioral1

discoveryexecutionimpactpersistence

behavioral2

defense_evasiondiscoveryevasionexecutionimpactpersistence

	
		OSZAR »