62bea80e64ca49271daad06c8ab3ab91237e3646b941b445e950a364484a2d50

Analysis

max time kernel
18s
max time network
151s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
11/03/2024, 02:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bf947e740fff5ec9929dd96dc5bad26e.apk
Size 839KB
Sample240311-cqs4faaa36
SHA256 62bea80e64ca49271daad06c8ab3ab91237e3646b941b445e950a364484a2d50
MD5 bf947e740fff5ec9929dd96dc5bad26e
SHA1 8cde2c03cef3f99cb594cd5ebfe4e923785c4822
SHA512 9987d274ece5860d39ca9c7db314eb2d721b40ec049685aa3ba1f5eb78a3310ba6b9a7b04b8b93068031e11b50f0aad63f26f34e6678ae753b796e415e568a7c
SSDEEP 24576:/mLxMJ5xFAo4U0GyQzZfrsa7eg8emXXcsI:exMJb4UHJJQa6g8emXXXI
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 2 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
5113	system.operating.dominance.proj
5113	system.operating.dominance.proj

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	system.operating.dominance.proj

system.operating.dominance.proj
1⤵
- Removes its main activity from the application launcher
- Acquires the wake lock
PID:5113

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

IM.txt

Path /data/data/system.operating.dominance.proj/files/IM.txt
Size 9B
SHA256 53ce58fe26e8d478648a6c28b3a91e8df389c244091885fd374851879326d806
MD5 9bd6b873f0237ff3a93565c13d592633
SHA1 84f035bff19823082af67d46ef9545a1503d49d7
SHA512 08efdc1d1e21ac356a7eb6ab1c77ad176a299952ad6553c4092066c49a35781e5e6c8a9119621ff998ffc7bc5628d9918436130410e8dee3ce37ce297b7d5e79
MD5 SHA1 SHA512

Submit Download