babf1bf86fa5e5704fc3d12290ed44bb44ad630df9a7521ebc2a9703fab647ca

Analysis

max time kernel
7s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
16/03/2024, 02:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ba468d82ce75844db0c788f013936913.apk
Size 9KB
Sample240316-ck71eahd6s
SHA256 babf1bf86fa5e5704fc3d12290ed44bb44ad630df9a7521ebc2a9703fab647ca
MD5 ba468d82ce75844db0c788f013936913
SHA1 66cca786a0762e3109c18bf93b81ef3453c61370
SHA512 310e4a9d764932ae6d312beec9536d4b4bfb4e70dde21e3878c30acc77cdacb3992d92fd03f8ca04588b2555cc5383ec4727fd1eb347b10989004bc0d0c3f95d
SSDEEP 192:gLt7+5Nm4xri+XojVomDvBv0K0j5WTpoNTE6abFhmQ:gLtx4xrijjKBleo+3brmQ
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
4403	com.metasploit.stage

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.metasploit.stage

com.metasploit.stage
1⤵
- Removes its main activity from the application launcher
- Acquires the wake lock
PID:4403

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads