General

  • Target

    GuitarTuna_v.6.16.0_mod_apkdone.com.apk

  • Size

    45.4MB

  • Sample

    240701-yegf6azcjn

  • MD5

    e78015a92854bbb9b97582c977022080

  • SHA1

    db096776b92e23c75368dd7bf3c548778f029ff9

  • SHA256

    00dc362681c1a348b011c653dd32c0083aad3966aca660220e6f3dc9c358a00e

  • SHA512

    b7227f7ecf9fd50a277762374c87863fcdbaf85f0727e9d1e8f0ae91f35b397f0f247abee70a910f916d5294516202979a83753e6637648d2b3d0abf02c63269

  • SSDEEP

    786432:ZGzmjqJ9RLQQVIEMgdPdxive/QDr7MMQ/7Sw60jFGAWq1X4vNwfnqa0xFZF1heJ4:cSeJ9VuEMCd0j7MfxGEX4vN2pYFZThg4

Malware Config

Targets

    • Target

      GuitarTuna_v.6.16.0_mod_apkdone.com.apk

    • Size

      45.4MB

    • MD5

      e78015a92854bbb9b97582c977022080

    • SHA1

      db096776b92e23c75368dd7bf3c548778f029ff9

    • SHA256

      00dc362681c1a348b011c653dd32c0083aad3966aca660220e6f3dc9c358a00e

    • SHA512

      b7227f7ecf9fd50a277762374c87863fcdbaf85f0727e9d1e8f0ae91f35b397f0f247abee70a910f916d5294516202979a83753e6637648d2b3d0abf02c63269

    • SSDEEP

      786432:ZGzmjqJ9RLQQVIEMgdPdxive/QDr7MMQ/7Sw60jFGAWq1X4vNwfnqa0xFZF1heJ4:cSeJ9VuEMCd0j7MfxGEX4vN2pYFZThg4

    • Checks if the Android device is rooted.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

    • Queries information about active data network

    • Reads information about phone network operator.

    • Listens for changes in the sensor environment (might be used to detect emulation)

MITRE ATT&CK Matrix

Tasks