254fe41d045071fa1d47325708cfe7dc1b297288f80fe6e8e14d3757c6d38524 | Triage

Analysis

max time kernel
3836569s
max time network
1216s
platform
android_x64
resource
android-x64-arm64-20231023-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231023-enlocale:en-usos:android-11-x64system
submitted
18-11-2023 22:43

Sharing

Report Analysis Logs

General

Target

ready.apk
Size

50.9MB
MD5

5351d9f441f6e523c5048bbeedf98ca3
SHA1

bd9bfa480afe89504b5035a494dee9aa83b23ea4
SHA256

254fe41d045071fa1d47325708cfe7dc1b297288f80fe6e8e14d3757c6d38524
SHA512

e92f1b8f3742514bb06002d1c5813faa15c576c98ac9c9201478fa675321cb4795846bc51aca9c39a6dfbaf87c626ef31dee15a898e22beac53509db34e77427
SSDEEP

1572864:5op0lqYnr6svwIHiMapLXpC9mVy4GlqdHxt6:ypkqe6XICMuUMVr4qVx8

Score

8^/10

stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 IoCs

pid	Process
4542	package.name.suffix

Requests dangerous framework permissions 19 IoCs

description	ioc
Allows an application to access any geographic locations persisted in the user's shared collection.	android.permission.ACCESS_MEDIA_LOCATION
Allows an application to read user selected media files from external storage.	android.permission.READ_MEDIA_VISUAL_USER_SELECTED
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to access any geographic locations persisted in the user's shared collection.	android.permission.ACCESS_MEDIA_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

package.name.suffix
1⤵
- Removes its main activity from the application launcher
PID:4542

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/.apk.apk

Filesize
54.4MB

MD5
8c6a02a816fbe70a58f61ee32cbe4f3e

SHA1
aa741a1c85956eda27febe3a490995eeb7d1fe3b

SHA256
cbc7e07dfbadc98094114e5ae3ec3840a9a0cb7f6f89a9ade219ff721bc808ca

SHA512
872e5cf498b15d36d2c4bc32d3665a98b786891e44333f7d89ecd933d8081fc5b91ede86286eeace4b2855209ee7d5636d5314442d5617f74b1905e99064e371

Download Submit