Skip to content

Hide Navigation Hide TOC

ANDROIDOS_ANSERVER.A - S0310 (4bf6ba32-4165-42c1-b911-9c36165891c8)

ANDROIDOS_ANSERVER.A is Android malware that is unique because it uses encrypted content within a blog site for command and control. (Citation: TrendMicro-Anserver)

Cluster A Galaxy A Cluster B Galaxy B Level
System Information Discovery - T1426 (e2ea7f6b-8d4f-49c3-819d-660530d12b77) Attack Pattern ANDROIDOS_ANSERVER.A - S0310 (4bf6ba32-4165-42c1-b911-9c36165891c8) Malware 1
ANDROIDOS_ANSERVER.A - S0310 (4bf6ba32-4165-42c1-b911-9c36165891c8) Malware System Network Configuration Discovery - T1422 (d4536441-1bcc-49fa-80ae-a596ed3f7ffd) Attack Pattern 1
ANDROIDOS_ANSERVER.A - S0310 (4bf6ba32-4165-42c1-b911-9c36165891c8) Malware Dead Drop Resolver - T1481.001 (986f80f7-ff0e-4f48-87bd-0394814bbce5) Attack Pattern 1
Web Service - T1481 (c6a146ae-9c63-4606-97ff-e261e76e8380) Attack Pattern Dead Drop Resolver - T1481.001 (986f80f7-ff0e-4f48-87bd-0394814bbce5) Attack Pattern 2