b4a7f0d4b6a6f219bfa48221999b885b70bacb263e71264f0952eae8a869ec47

Analysis

max time kernel
14s
max time network
156s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
01/03/2024, 01:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b00349e7a482e441a5a6ad11b0cd949a.apk
Size 7.4MB
Sample240301-b71zyaaa4v
SHA256 b4a7f0d4b6a6f219bfa48221999b885b70bacb263e71264f0952eae8a869ec47
MD5 b00349e7a482e441a5a6ad11b0cd949a
SHA1 56e187c4dd6aed1b3ddbc999bb1ef5654b55b85d
SHA512 d467f4222351ce8de439baf9b42ecc56322ffc2f88e3353e4eb44ece5b0f20194125a4685ccbecbdbc6d72f06240719b226097cff532ce4f11330ff3569dcbb8
SSDEEP 98304:kDhQoNOV+o4HWLSrqMi70KPT6bwFfSzqxGFDlLPMl9X:kDhQoNEL2S/6gLl9
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
4190	com.netictech.scottiegoedu

Checks the presence of a debugger
evasion

com.netictech.scottiegoedu
1⤵
- Removes its main activity from the application launcher
PID:4190

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

65E133D6000C-0001-105E-D1E6D75CEB3CBeginSession.cls_temp

Path /data/data/com.netictech.scottiegoedu/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65E133D6000C-0001-105E-D1E6D75CEB3CBeginSession.cls_temp
Size 79B
SHA256 4286a3da0e499e5188a743963d6b4054a7043436916ca584119523daf9e5e9b3
MD5 0d1ba9f4b794c6c8a4fb7b92d7ab138c
SHA1 b995fdd8348fc4ac3e9c3f7551348b5a71647560
SHA512 fd3490ee4f8d54fa5d0b510c25414c89f9c227de22f4ab5dcaeed7ad41283f658a76862313c09f621d8a1dc002da88e8e51c86580130f7770e6efeca44c5515a
MD5 SHA1 SHA512

Submit Download

65E133D6000C-0001-105E-D1E6D75CEB3CSessionApp.cls_temp

Path /data/data/com.netictech.scottiegoedu/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65E133D6000C-0001-105E-D1E6D75CEB3CSessionApp.cls_temp
Size 122B
SHA256 f1431423d7de16ceafa4bfd1e4174ece0009e211482468729d404b34a1709ab6
MD5 dbcce2c89280b6d8201e7a31d2b2c5a0
SHA1 89743455a80c2436db0ff12f0c08175f590987af
SHA512 08636c683714b80b4a5081456bbf8cd858da57fe16c799f351c8eeed225707f174a346d5090f9415a05d2b03616967384ad6550ac74a02a51c59c2dbc8243db4
MD5 SHA1 SHA512

Submit Download

65E133D6000C-0001-105E-D1E6D75CEB3CSessionDevice.cls_temp

Path /data/data/com.netictech.scottiegoedu/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65E133D6000C-0001-105E-D1E6D75CEB3CSessionDevice.cls_temp
Size 131B
SHA256 6de6c6d39d991fa86193134ac1784ae0d01fec8f102ce884dcf83a50cebba09e
MD5 e3ee210a9365f19a61839a59570ca053
SHA1 99b952d6771e3d0519716e0d8ff590cd31e14701
SHA512 dabf18f6cce613b676c1e69363851c5c7eb038b02d05f1e4d1542c68b90dbdb4f30b16520618df486bd58ebc019b648c6414ca3f6b7463e5389ecf325cad3432
MD5 SHA1 SHA512

Submit Download

65E133D6000C-0001-105E-D1E6D75CEB3CSessionOS.cls_temp

Path /data/data/com.netictech.scottiegoedu/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65E133D6000C-0001-105E-D1E6D75CEB3CSessionOS.cls_temp
Size 14B
SHA256 d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9
MD5 9b3d4522944ce6396563812bfdb92fa9
SHA1 6d2a6133c8f01938a48ccc77ef86ad8ca335c020
SHA512 091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727
MD5 SHA1 SHA512

Submit Download

session_analytics.tap

Path /data/data/com.netictech.scottiegoedu/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Size 1KB
SHA256 7de8beb72068bf75bd15eb51cd7854778c090e309c370986a4b6a40f3d885703
MD5 fc94258f0b19f4a08cd8bb2b04088e77
SHA1 770b0dc7bcc41446b971be8c991e242d9fac8c34
SHA512 9a48e010bf264d0e5ac94f7650db11fce6103eb8f381da18b8bb0638f28f1148de4684b6047c1c3800aaec4959a65a16ee673edb573ba4a56b65ddda4b46fc92
MD5 SHA1 SHA512

Submit Download

session_analytics.tap

Path /data/data/com.netictech.scottiegoedu/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Size 525B
SHA256 c407ce3c785ed65d8f0c5d6e7dfee6ca0d846ae2f2cc3a705fda1421e04972ed
MD5 c2cbecaee029d384705545ad6d3dd3e7
SHA1 ddde094fad6327137cabce2684a3d511ea4a2dc9
SHA512 4f338eb36a80285b27b84bbd27d99a3d359c5b42b51dc03ead40d5b050d36f8fe92e1a1bb9381e493047737301e6cb0633d68e58e9127909f7290690f0ed9843
MD5 SHA1 SHA512

Submit Download

session_analytics.tap.tmp

Path /data/data/com.netictech.scottiegoedu/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Size 16B
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
MD5 SHA1 SHA512

Submit Download

sa_e4cdc1a3-53cf-4727-bd59-d8fc183ab34e_1709257687356.tap

Path /data/data/com.netictech.scottiegoedu/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_e4cdc1a3-53cf-4727-bd59-d8fc183ab34e_1709257687356.tap
Size 402B
SHA256 015dbe0d2216e4c33252c3f0b5a169e4f40bac91074caa577277777be005a6a4
MD5 973901918a4fbb3f1799ff13a2fa52a2
SHA1 470dcd00b81d219b8aaa5aa87265594938645007
SHA512 18c8536ef8a1f923a8e90a79e83a93d07805d54bfc117c56b425f49a923860f0f7385dcc419deae56ebb6524c7515ba3c06b8e630129011fabb01788da66c99b
MD5 SHA1 SHA512

Submit Download

odJWUXjYO

Path /data/data/com.netictech.scottiegoedu/files/odJWUXjYO
Size 354KB
SHA256 62aace5aa63329c3d847fb3908e821b597fc13f2034069e7180a0ae75001c33c
MD5 f09319317270b4856dea43335e9dece4
SHA1 3750f30362ccea842432b228a9ffdd0200a8d76e
SHA512 7229033ebeefc8b0c29e7cbb1c66eaed960d1a290d1e0a11e9abf532357078311c4bcd792f4470cf8e1bde04cd5abe94376183c47264975ef880e95ff1124d54
SSDEEP 6144:hKut4jmdTcEgQT9FUWT+OyN3WYKRnTPObNoncDHQBxbGKJ6pKkHGU8GBlpMwiLEc:uw6KBsp9dLe9lWWN2gBh8/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

odJWUXjYO

Path /data/data/com.netictech.scottiegoedu/files/odJWUXjYO
Size 635KB
SHA256 80883ec4a032f67ed0237a1fdd6bb11e57d1f9009c9c23a32d98a290965499e8
MD5 35149b40df26ef2a7f665df49ff338cf
SHA1 231843376225d70ca317a3578c703d78d110bca4
SHA512 926be83cb658103a03acd98b8d5dadd93d03848972d2d4d6e15e15fd733b05a653c1aa89a35cd10e411ad8318a7fad4da3a8143c7faaf69cc272f8cd48625822
SSDEEP 6144:BSC1v4YmdTcEgXTWFUWpyW+N3WYKRnWPpbNonQ06imj+41V35m2qL9EnaE4Pksk6:B46T56CnaEikskM3LZuAv0o96jj+o
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads