62bea80e64ca49271daad06c8ab3ab91237e3646b941b445e950a364484a2d50

Analysis

max time kernel
18s
max time network
160s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
11/03/2024, 02:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bf947e740fff5ec9929dd96dc5bad26e.apk
Size 839KB
Sample240311-cqs4faaa36
SHA256 62bea80e64ca49271daad06c8ab3ab91237e3646b941b445e950a364484a2d50
MD5 bf947e740fff5ec9929dd96dc5bad26e
SHA1 8cde2c03cef3f99cb594cd5ebfe4e923785c4822
SHA512 9987d274ece5860d39ca9c7db314eb2d721b40ec049685aa3ba1f5eb78a3310ba6b9a7b04b8b93068031e11b50f0aad63f26f34e6678ae753b796e415e568a7c
SSDEEP 24576:/mLxMJ5xFAo4U0GyQzZfrsa7eg8emXXcsI:exMJb4UHJJQa6g8emXXXI
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 2 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
4680	system.operating.dominance.proj
4680	system.operating.dominance.proj

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	system.operating.dominance.proj

system.operating.dominance.proj
1⤵
- Removes its main activity from the application launcher
- Acquires the wake lock
PID:4680

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

IM.txt

Path /data/user/0/system.operating.dominance.proj/files/IM.txt
Size 7B
SHA256 a6a8deab7e62f8c0a01519b38576dbdb3a77bd264e38ae3b78220974032172cd
MD5 aad4394a9b93b243c2d71519b7739cba
SHA1 d208032257274be3a3e227291d2e2867977982ed
SHA512 38488c3b813c60e4c666846f2cad7f8cdcd5c234b8ce6fb0d4f71c8afb8ccdfa4e0d2afd49e847a23a267fd36e8c755790a02bc090c2f64432e4b757e00482ad
MD5 SHA1 SHA512

Submit Download