MITRE ATT&CKsoftware (malware)

S1061 AbstractEmu

Published 2023-02-06 Modified 2025-04-16 Official page ↗
Domain
mobile
Platforms
Android
Version
1.0
Created
2023-02-06

Description

AbstractEmu is mobile malware that was first seen in Google Play and other third-party stores in October 2021. It was discovered in 19 Android applications, of which at least 7 abused known Android exploits for obtaining root permissions. AbstractEmu was observed primarily impacting users in the United States, however victims are believed to be across a total of 17 countries.

Related

Uses · MITRE ATT&CK (23)

  • T1422.001 Internet Connection Discovery sub-technique
  • T1437.001 Web Protocols sub-technique
  • T1626.001 Device Administrator Permissions sub-technique
  • T1629.003 Disable or Modify Tools sub-technique
  • T1636.002 Call Log sub-technique
  • T1636.003 Contact List sub-technique
  • T1636.004 SMS Messages sub-technique
  • T1646 Exfiltration Over C2 Channel technique
  • T1623.001 Unix Shell sub-technique
  • T1633 Virtualization/Sandbox Evasion technique
  • T1633.001 System Checks sub-technique
  • T1544 Ingress Tool Transfer technique
  • T1533 Data from Local System technique
  • T1517 Access Notifications technique
  • T1512 Video Capture technique
  • T1404 Exploitation for Privilege Escalation technique
  • T1406 Obfuscated Files or Information technique
  • T1407 Download New Code at Runtime technique
  • T1418 Software Discovery technique
  • T1422 System Network Configuration Discovery technique
  • T1426 System Information Discovery technique
  • T1429 Audio Capture technique
  • T1430 Location Tracking technique

References