5e77dde574df0aff7620c00ae47a438cf568f57b0465b87debf95b1f9660dd1f

Analysis

max time kernel
151s
max time network
140s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
10/03/2024, 22:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
5e77dde574df0aff7620c00ae47a438cf568f57b0465b87debf95b1f9660dd1f.apk
Size 24KB
Sample240310-12nvvsdb8x
SHA256 5e77dde574df0aff7620c00ae47a438cf568f57b0465b87debf95b1f9660dd1f
MD5 a45c97faba7a677a7b0fd398be6f71db
SHA1 397d1444d34ec490411cef44d36bf84bb66276e1
SHA512 f913ccadf101bafef189f138a69b6aa2a73c6f858547689d09d5bf0b6dff6c9fc21bd616c3948a03d5c039e466c8338344a8ff26d75f23fd08357dfb46a7bb72
SSDEEP 384:B19cji7V3iDzssY2vqhFYE//gwekBYbv+93NDgbVa1NdnwNuT9GgY0oKpxiXopIk:BgaV3iDzsh2vi7BP9dAENcO/vWA
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
5113	com.recover.scan

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.recover.scan

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.recover.scan

com.recover.scan
1⤵
- Removes its main activity from the application launcher
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:5113

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads