Zen - S0494 (22faaa56-a8ac-4292-9be6-b571b255ee40)

Zen is Android malware that was first seen in 2013.(Citation: Google Security Zen)

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Generate Traffic from Victim - T1643 (a8e971b8-8dc7-4514-8249-ae95427ec467)	Attack Pattern	Zen - S0494 (22faaa56-a8ac-4292-9be6-b571b255ee40)	Malware	1
Zen - S0494 (22faaa56-a8ac-4292-9be6-b571b255ee40)	Malware	Download New Code at Runtime - T1407 (6c49d50f-494d-4150-b774-a655022d20a6)	Attack Pattern	1
System Runtime API Hijacking - T1625.001 (c6e17ca2-08b5-4379-9786-89bd05241831)	Attack Pattern	Zen - S0494 (22faaa56-a8ac-4292-9be6-b571b255ee40)	Malware	1
Disable or Modify Tools - T1629.003 (2aa78dfd-cb6f-4c70-9408-137cfd96be49)	Attack Pattern	Zen - S0494 (22faaa56-a8ac-4292-9be6-b571b255ee40)	Malware	1
Input Injection - T1516 (d1f1337e-aea7-454c-86bd-482a98ffaf62)	Attack Pattern	Zen - S0494 (22faaa56-a8ac-4292-9be6-b571b255ee40)	Malware	1
Zen - S0494 (22faaa56-a8ac-4292-9be6-b571b255ee40)	Malware	Exploitation for Privilege Escalation - T1404 (351c0927-2fc1-4a2c-ad84-cbbee7eb8172)	Attack Pattern	1
Ptrace System Calls - T1631.001 (1ff89c1b-7615-4fe8-b9cb-63aaf52e6dee)	Attack Pattern	Zen - S0494 (22faaa56-a8ac-4292-9be6-b571b255ee40)	Malware	1
Obfuscated Files or Information - T1406 (d13fa042-8f26-44e1-a2a8-af0bf8e2ac9a)	Attack Pattern	Zen - S0494 (22faaa56-a8ac-4292-9be6-b571b255ee40)	Malware	1
System Runtime API Hijacking - T1625.001 (c6e17ca2-08b5-4379-9786-89bd05241831)	Attack Pattern	Hijack Execution Flow - T1625 (670a4d75-103b-4b14-8a9e-4652fa795edd)	Attack Pattern	2
Disable or Modify Tools - T1629.003 (2aa78dfd-cb6f-4c70-9408-137cfd96be49)	Attack Pattern	Impair Defenses - T1629 (20b0931a-8952-42ca-975f-775bad295f1a)	Attack Pattern	2
Process Injection - T1631 (b7c0e45f-0206-4f75-96e7-fe7edad3aaff)	Attack Pattern	Ptrace System Calls - T1631.001 (1ff89c1b-7615-4fe8-b9cb-63aaf52e6dee)	Attack Pattern	2