05ff22637856bb0edd57cb710afa0d6f944c977fd1045dbd78ea3fb634fa8fb0

Analysis

max time kernel
2s
max time network
137s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
21-03-2024 06:48

Target

KissLand.apk
Size

3.7MB
MD5

2692680a7b8c65d4c840de1c8f40788a
SHA1

588313f53c98ed371da721a815387d0b557b628d
SHA256

05ff22637856bb0edd57cb710afa0d6f944c977fd1045dbd78ea3fb634fa8fb0
SHA512

d448d59f15fee5e916f50710aea129ca5d16b63f118a7c2c7f6d58fa105e38d80d729b55c1c1ff82362396cbd42ef487f76bb2cb2031a94d6e0b908f7c39e71f
SSDEEP

98304:SZZTSHh5MkkFXIMt5A5qWfpLCrcy+sK3yAPax8vkt11uI6:SZZTSHMZYSW5XWJOyuu8K1y

Score

6^/10

discovery

Acquires the wake lock 1 IoCs

Processes:

edward.org

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	edward.org

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

/data/data/edward.org/files/PersistedInstallation3116799096114161447tmp

Filesize
90B

MD5
fcf04e6159c5c6256253f91415aaf767

SHA1
e71f13462c39094ee04969f969526b13706899ad

SHA256
cfe53550d8d9b8efae55babb93c79623c9221d500f23fdbb41b9b16587243637

SHA512
16cc0327c505ef04488f8aab67d1baa2ea8b5cda821dcca0137dee38797742fe440710c71f67b711da587b41568f3b1970bd74396002a4b64a1cb9bb6aa7133e

Download Submit