122d19180834cb2ee093c7455f1e75ea4273b80eb997ffec768127f15c57633e

Analysis

max time kernel
51s
max time network
58s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
02-02-2024 14:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

base.apk
Size

833KB
MD5

81aa3135c5f97fbd4509cbb1176b2ae3
SHA1

504c08f10a522c2f0b3e14ff2b154bb5a8a0a698
SHA256

122d19180834cb2ee093c7455f1e75ea4273b80eb997ffec768127f15c57633e
SHA512

2213d8ec5c7b9ba9fa5a862f287884cb107f18763f9bb79670eed570ee1d3e13922ef1cc7ca28c22869601fe12dfe432f5f0c2a06a4dc018384a8e71d4a58529
SSDEEP

12288:c2irslMFHAiHDrPOk46o+688+LaD26C9XgqRCIlNE8Z6GvhZH:cjrsl0AiHPOk8+69WaDnG5Zb

Score

8^/10

stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 IoCs
stealth trojan

Processes:

yps.eton.application

pid process

5181 yps.eton.application
Legitimate hosting services abused for malware hosting/C2 1 TTPs 1 IoCs

Web Service
T1102

Processes:

flow ioc

28 4.tcp.eu.ngrok.io

pid	process
5181	yps.eton.application

flow	ioc
28	4.tcp.eu.ngrok.io

yps.eton.application
1⤵
- Removes its main activity from the application launcher
PID:5181

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

T1102

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/yps.eton.application/files/config2024-02-02.log
Filesize
176B

MD5
eb794fde74d28dbc8c5adf71d7a8cd5e

SHA1
c44cdb88a363e8cdd488597c49c494178cd43f63

SHA256
d298593354cc9a42a693aa2b488539df82df43c90aa22739fa441fca7886e90e

SHA512
ed95271f197d5908d07723c4033db0d49fa04f35cad549f6229630c4607f97f160fff261919bd910558538ac7bcfc1f82dd6cb9ced063ec5cb74304d73c4d622

Download Submit
/data/data/yps.eton.application/files/config2024-02-02.log
Filesize
164B

MD5
5617b339525123de4a84dc6bf9ed24c9

SHA1
8c920bf4208b49aa4b1e5da274875858f6860fb1

SHA256
c3e9b943c73fc90cc8668b967e7596769fd2c5b3a7c5eebaa83d93e443a0086e

SHA512
42be2ca87f6170e1306f2dc87225043715844b361d60c1e75f98cf3a424e671393c6492c4db3208863c1f1a43c70292fcaaa9fb4734f74eb3ec128f6fc7d4d92

Download Submit
/data/data/yps.eton.application/files/config2024-02-02.log
Filesize
183B

MD5
4eb0b6ec64b0f521b3ce9c808519b6b9

SHA1
9a4cc8e8975e30278d94a42205a25fc6f466f04c

SHA256
8e19285cfcd4b8e510a375d0481bba0577c9af68d3a5104e0c3442c4409b7120

SHA512
373382902f486ad539f864f6244e5e0967aed5912f772de1e10bcb8e2bc6e8d70f6a3c423e7c19b2fd14aaef84d5f62a66f0e19e520ec9463d6dd8418b4fef11

Download Submit
/data/data/yps.eton.application/files/config2024-02-02.log
Filesize
176B

MD5
38eac87a2d2d80706591b7557a7152c8

SHA1
6061bb3696fb5d36c2a0801d16a0e515a2310230

SHA256
5d1bbb43e42694015d93f4a97d6e34be156d9436b3790314ccc6332eb97fd043

SHA512
521d1aead02ea8949b46485ac8dc454d31636009facca76882606aa823a2fd6b260208d890652977044aa2edba946c7b8a1da93074b62db9a33929b780dd9540

Download Submit
/data/data/yps.eton.application/files/config2024-02-02.log
Filesize
180B

MD5
6d5a7694388471419024ead964859e30

SHA1
1340a00f18ce56abf9f9f5d03ad9b3a2ba0c23c9

SHA256
ee356f9080b5645fecfbb47d4442bddaba722f85d1cdfd960c80017acf259a86

SHA512
fa6c049b954f717b258bc75f74c9cdc78cb1b4ebc615b542e5ac3991a4dcab8dd59df7fa93544a33c78277b686173620cef4d3ef10ef08ed06a57079b74e5581

Download Submit
/data/data/yps.eton.application/files/config2024-02-02.log
Filesize
183B

MD5
379488887d4b1198fcd70c2817d73e74

SHA1
8c55b9fd0eddd457cb6fd47d7537a485689eb16e

SHA256
109a506a881899d233b7595e781cd553f8c8b141af208de5e92b6352f0a159ab

SHA512
2f61935154b92e4eefe43fadb26485737cebea0224e4fe5ba52cfaa63371ae4094fab5af5f74ebbf7533fd6187b408addc876bab76179cb3fb0fa98301c71c97

Download Submit