62bea80e64ca49271daad06c8ab3ab91237e3646b941b445e950a364484a2d50

Analysis

max time kernel
173s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
11/03/2024, 02:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bf947e740fff5ec9929dd96dc5bad26e.apk
Size 839KB
Sample240311-cqs4faaa36
SHA256 62bea80e64ca49271daad06c8ab3ab91237e3646b941b445e950a364484a2d50
MD5 bf947e740fff5ec9929dd96dc5bad26e
SHA1 8cde2c03cef3f99cb594cd5ebfe4e923785c4822
SHA512 9987d274ece5860d39ca9c7db314eb2d721b40ec049685aa3ba1f5eb78a3310ba6b9a7b04b8b93068031e11b50f0aad63f26f34e6678ae753b796e415e568a7c
SSDEEP 24576:/mLxMJ5xFAo4U0GyQzZfrsa7eg8emXXcsI:exMJb4UHJJQa6g8emXXXI
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 3 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
4244	system.operating.dominance.proj
4244	system.operating.dominance.proj
4244	system.operating.dominance.proj

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	system.operating.dominance.proj

system.operating.dominance.proj
1⤵
- Removes its main activity from the application launcher
- Acquires the wake lock
PID:4244

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

IM.txt

Path /data/data/system.operating.dominance.proj/files/IM.txt
Size 9B
SHA256 f435027cf99f0f70e856f53714431dd22f046c2a806a6d654d77ea4e9a03b2c2
MD5 e5f5c4dfbd1a180ad0e673c2266b50af
SHA1 38a4f50ed89d2fda3d09b7bfc1680f73edaa12b5
SHA512 12772fcc0e9e8cdab495dc50f625f63e4a2ace23644224c9e5b82fbec46570a73e16f53d746d50ac4e03167e20d01e3e00d5988f8687afa5d076dad6eace90c5
MD5 SHA1 SHA512

Submit Download