Malware Analysis Help analysing this MP4 file while running on android 5 and 6

[Abdallah]

My friend received this url many times ( hxxp://bvas.co:8080/?s=132 ) which leads to ( hxxp://bvas.co:8080/d/17Jun18_Candid_Camera_29.mp4 ) , I am a fraid this using the stagefright like vuln, any suggestions ?

 

[Parsh]

My friend received this url many times ( hxxp://bvas.co:8080/?s=132 ) which leads to ( hxxp://bvas.co:8080/d/17Jun18_Candid_Camera_29.mp4 ) , I am a fraid this using the stagefright like vuln, any suggestions ?

A Google security guy had said on the breakout that the ASLR (Address Space Layout Randomizer) method used in Android kernel can prevent the SF exploit from harming the device and about the number of actually compromised devices, no confirmed cases have been found.
Coming to your friend's issue, is his/her OS updated? Which version and build of Android is he/she using?
There are chances that if the OS is updated, the device is safe from the vulnerability. The fixes were out long ago.