c3ec38c2396fbbde9806d58fd0f9be3e6d3c5406f57ece875c02a0b29359d5f1

Analysis

max time kernel
9s
max time network
133s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
26/02/2024, 22:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
c3ec38c2396fbbde9806d58fd0f9be3e6d3c5406f57ece875c02a0b29359d5f1.apk
Size 2.2MB
Sample240226-1zejeahh4s
SHA256 c3ec38c2396fbbde9806d58fd0f9be3e6d3c5406f57ece875c02a0b29359d5f1
MD5 5d75ebfe5e821cccf4cd6777c9732887
SHA1 d104a17ebb133ddf0f3ef7743bbec12ef41724bf
SHA512 e6921b4d246fcc4b2ffeea1a57c71a6ce2f5ff32fb7450271f2b00b868010d03209176e70d8cc76bda6ae81fbd0638745bb2c8bd0f4f92cf9e9822de20e66e14
SSDEEP 24576:NNay8v6Kj24rKoxZ2ySKMpXcA/yUW6W5rBLWEdOtdaHO614gITPkoTYrcZ6mhAm2:Pa0KqH52CEt4gITPkoTYrc8xCvfM
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

collection discovery stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 IoCs

stealth trojan

pid	Process
5116	com.example.smshandler

Reads the content of SMS inbox messages. 1 TTPs 1 IoCs

collection

SMS Messages

T1636.004

description	ioc	Process
URI accessed for read	content://sms/inbox	com.example.smshandler

Reads the content of outgoing SMS messages. 1 TTPs 1 IoCs

collection

SMS Messages

T1636.004

description	ioc	Process
URI accessed for read	content://sms/sent	com.example.smshandler

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.example.smshandler

com.example.smshandler
1⤵
- Removes its main activity from the application launcher
- Reads the content of SMS inbox messages.
- Reads the content of outgoing SMS messages.
- Uses Crypto APIs (Might try to encrypt user data)
PID:5116

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Protected User Data

T1636

SMS Messages

T1636.004

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads