910fd1c6dec708f59eaaaa80e558c6b81dad8e91fe794e3a8ecde7e5a650bb43

Resubmissions

12-02-2024 18:29

240212-w43dtace95 6

12-02-2024 18:28

240212-w4ebzsce87 6

12-02-2024 18:27

240212-w3vbtaah61 6

Analysis

max time kernel
6s
max time network
59s
platform
android_x64
resource
android-33-x64-arm64-20231215-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20231215-enlocale:en-usos:android-13-x64system
submitted
12-02-2024 18:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

thamera.apk
Size

12.3MB
MD5

de544c5a8f02fe892bd60eddb84b75e9
SHA1

5b15b025ed2b5f84b1015bbd4a54545336a44d24
SHA256

910fd1c6dec708f59eaaaa80e558c6b81dad8e91fe794e3a8ecde7e5a650bb43
SHA512

a7861ca69dd6054cbfc18010d3accf7fceda238f7739ea943ed7dcf51d9da4b315d07e16b2bad4a4a4c69dd495b69e275aeb14ef94bb38105878095a7071ac2d
SSDEEP

393216:/Vzr7/UoBVqJbFaXeFo4MZICqubvjaUuT6Rx:/VzXMoV4lYZIJf2x

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service
T1102

Processes:

flow ioc

13 raw.githubusercontent.com
14 raw.githubusercontent.com
Reads information about phone network operator.

flow	ioc
13	raw.githubusercontent.com
14	raw.githubusercontent.com

com.example.myapplication
1⤵
PID:4287

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads