[DETECTION] Add rule for Zimperium

[apkunpacker]

[DETECTION] Add rule for Zimperium

[apkunpacker]

Hi,

can you explain which product is this one? This company has so many SDKs.

quick looks reveal it specific to RASP for example libzcloud have many anti frida codes.

_ZN3zdd18frida_checkSocketsE
_ZN3zdd29frida_checkSuspiciousMappingsE 
_ZN3zdd30frida_checkSuspiciousBacktraceE
frida_agent_main                                                                 
Application hooked by Frida                                                      
LIBFRIDA

[enovella]

Hi,

can you explain which product is this one? This company has so many SDKs.

[enovella]

Is this DexGuard 9.x (as seen in your log above) or custom code calling to this SDK? Do you have more samples?

[apkunpacker]

Is this DexGuard 9.x (as seen in your log above) or custom code calling to this SDK? Do you have more samples?

yeah its dexguard 9.x with additional zimperium sdk . at the moment no more sample available.

[apkunpacker]

another sample for zimperium
https://play.google.com/store/apps/details?id=com.chase.sig.android

[enovella]

Hi,
can you explain which product is this one? This company has so many SDKs.

quick looks reveal it specific to RASP for example libzcloud have many anti frida codes.

_ZN3zdd18frida_checkSocketsE
_ZN3zdd29frida_checkSuspiciousMappingsE 
_ZN3zdd30frida_checkSuspiciousBacktraceE
frida_agent_main                                                                 
Application hooked by Frida                                                      
LIBFRIDA

Do you have a sample with these strings?