Analysis
- max time kernel
123s - max time network
152s - platform
android_x64 - resource
android-x64-arm64-20231215-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system - submitted
03/02/2024, 23:48
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
ecb6af65179cf3fd1300620d5bac464b208f79bf2321f7558edf4c8fc5ba0c22.apk
Resource
android-x86-arm-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
ecb6af65179cf3fd1300620d5bac464b208f79bf2321f7558edf4c8fc5ba0c22.apk
Resource
android-x64-20231215-en
2 signatures
150 seconds
General
- Target ecb6af65179cf3fd1300620d5bac464b208f79bf2321f7558edf4c8fc5ba0c22.apk
- Size 123KB
- Sample240203-3tlfwacfd3
- SHA256 ecb6af65179cf3fd1300620d5bac464b208f79bf2321f7558edf4c8fc5ba0c22
- MD5 8b1a19bb5b20aa51b69b34faf796ac63
- SHA1 42b7bd92f84fbcc0be58959e63c5834ca91c7382
- SHA512 7c82905bf27751707da26e51925c51df44c8b9a5f110c25781cff4c0ebdd247ad50a5731261774b6e78692d04da090e3ed472b237dc4e70692093ca2bfb6dae0
- SSDEEP 3072:5rh/dsuEKRb8B/e1WxQ2N1W1xdXPm1bbUtcTbvXQQ5:5rhxbRb8B/emyHXe1Pd5
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
pid Process 4495 test.app - Tries to add a device administrator. 1 IoCs
description ioc Process Intent action android.app.action.ADD_DEVICE_ADMIN test.app - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock test.app
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/test.app/databases/a
- Size 12KB
- SHA256 bb8dee5b5c3779f175abbd142722eb0022b98d374783aa80145b34614a4de646
- MD5 f41f531c07d4141546a531ff9caffdcd
- SHA1 9dcac5aed06972d0ff6bd4cc1f1cdff85b36d3f5
- SHA512 e0c8d1a820cb4c098e45776e8b50ea8c83944ef2e3f005cb0acbfc07688974d370f78100ae022f62564fc4c12acfdc43b710c18ca1c30f4f575bc08b9b12d2d4
- SSDEEP 6:l9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKG:TLiuWdYRmBEyPbZ
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/test.app/databases/a-journal
- Size 512B
- SHA256 23e1099b86d63df20f935cee9206481126c0b6fcbd26c99ae94b20e2a858f8a8
- MD5 4e1e8bf25e556940d9dfcb4ee610b647
- SHA1 73c62c3b949eb7fa0565240349cabfb2c5fbd0c4
- SHA512 49478efb8b1d8eb49e03ed39272a7284b298264c8f5b36200d2e082f1ee9922dea5b36c125b2d6039877e763a275b9841dc564d2c67dd1c6d5ac75c6d07aae7e
- MD5 SHA1 SHA512
- Path /data/user/0/test.app/databases/a-journal
- Size 8KB
- SHA256 85eade5362b55f92fdfea005395b32e388f199ca66264ac1ef22378f06bfce51
- MD5 8ef77a2276c9255122bf5047c7f4316d
- SHA1 94f045193c8685a43a57790bf5fc80698aa68b22
- SHA512 1632b7b8dcaa010f057270d8bf60ef3051723ad4923efeb4708ede6b3084e2e67f7c60c179a95dc243da0410d083959263402f911e396c661049fd3e48429136
- SSDEEP 6:7+/l9L5/SFn1jhng9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKq:7+t15qdqLiuWdYRmBEyPbR
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/test.app/databases/a-journal
- Size 8KB
- SHA256 5927bfd69e1779c54b8ab53f605cb8e0bec8ee14b42ae13b1cdc3f4386d11a4d
- MD5 5be38e729817303d90c751cbb5ae801c
- SHA1 7deef4398295a2fac94d06559347d728f81c8fa2
- SHA512 6d8631d0ff6b1b0f572ec1b4e3047949565f8fbde0e98f75e9e0bb691d0e536e6f229110a8d41593e643d5007ab9aa367f2d96eeaad8ea89ab0db448618ace1a
- SSDEEP 6:+Pg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKb//:SqLJdeWRmBEyPbs/
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/test.app/databases/b
- Size 20KB
- SHA256 61b4315397ed9f7ce8cbf52f77ced4fb63c20a235339a3bb16f8a0196ab23e14
- MD5 22038629789dfb4b6a59a09503d4e6d5
- SHA1 4aed007e8af5bea689d209acdcace1315750633e
- SHA512 278979536df9ec9a089d9192adc4a60da0aeb1509c75840baebcb8e91f82ae61ab2de71c0276f34a652841befc2f09df9e47a47f3fef27ce2b7ea93135cd3c56
- SSDEEP 12:TLmaNyNTSFbyOhuF8lMSX6OtJgNRmBEyPbAVOwG:TLXg8uOSGTtJfGSEG
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/test.app/databases/b-journal
- Size 512B
- SHA256 034bd4f7d8e994f700a06a5b209c775fc16199a9bf0907b0fb8424bd14a406c5
- MD5 76a70632f9e1158ed1e00ab73979e05d
- SHA1 9c412ac45d9f97af6e24efb4ed305ce5bd1ff092
- SHA512 2ea3973597fc090ca779ead320eff4f465f44fcf5ec7a8906e108db1598dad770059e8a83df4ba4ba76c2493e577b37c87f8a6fff0df2ba0f490091eac932fa8
- MD5 SHA1 SHA512
- Path /data/user/0/test.app/databases/b-journal
- Size 8KB
- SHA256 f7da9a77c572d03eb86c5fc09557e71fcc1aefea7b2ea0cab2744bbf190bdebc
- MD5 4d0437b5c97fe2bb2223ea92853c4166
- SHA1 7d85e2894d08d1031ec0088d4a259f46f0dc65c6
- SHA512 2a2ddb034f462dae57cd0bf879aa1b72bfcdecb624368922e87733a5bceb360c866aa916a87744b40de780e753c9d6f9aafebac0e00f5271d8ef13591962eb7d
- SSDEEP 6:7+/l9Mln13g9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK0F:7+tEqLiuWdYRmBEyPbH
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/test.app/databases/b-journal
- Size 8KB
- SHA256 7632744ff8a8031102a0dc394ced268bc24103d9c1d128eb0e65d22f4ee35489
- MD5 929abbf259fddec02fe6d2a312504bd6
- SHA1 136579ee121592bc4a7fd9de8bb638ad38952a38
- SHA512 fd4872753595156ca65e501fcb9bfec75f5d86070c640e2f1efffab53752d057a12cb55e0b5339c9ce2c31ddb98143358f39e7ab5ab0bb465d7ace8979e7435b
- SSDEEP 6:7+/l96RJ4Pg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKoh/Cz:7+twRJwqLJdeWRmBEyPbTw
- MD5 SHA1 SHA512 SSDEEP