Analysis
-
max time kernel
5s -
max time network
137s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system -
submitted
02-04-2024 10:20
Behavioral task
behavioral1
Sample
e974bfe5c6bacbe466b3bb8fef673b32fd7dc4a6cfbbe1e8260b5776af1ce145.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
e974bfe5c6bacbe466b3bb8fef673b32fd7dc4a6cfbbe1e8260b5776af1ce145.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
e974bfe5c6bacbe466b3bb8fef673b32fd7dc4a6cfbbe1e8260b5776af1ce145.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
e974bfe5c6bacbe466b3bb8fef673b32fd7dc4a6cfbbe1e8260b5776af1ce145.apk
-
Size
2.8MB
-
MD5
a5accdaea323327f083cacefe0683caa
-
SHA1
b5bf43f2ef1751a27cc2f251a7717cceba6daf4a
-
SHA256
e974bfe5c6bacbe466b3bb8fef673b32fd7dc4a6cfbbe1e8260b5776af1ce145
-
SHA512
5bb7792fe8d040eb186ae4d16045ee04806961dbccba22fa9ecce0de31e2c3e392ab29b4d0c335b184630772cf5e88309125a9dca43c41dcda677857dbcdf9f3
-
SSDEEP
49152:t/hml99KMTSHh5dA4bwrpXulxFQ9M/UR+kN4FQhYMXlBu59kk:lsZTSHh5FgpXIxdkN4FItu59kk
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock Mad1sal.com -
Reads information about phone network operator. 1 TTPs
Network
-
Remote address:1.1.1.1:53Requestssl.google-analytics.comIN AResponsessl.google-analytics.comIN A142.250.180.8
-
Remote address:1.1.1.1:53Requestgoogle.comIN AResponsegoogle.comIN A142.250.187.238
-
Remote address:1.1.1.1:53Request238.187.250.142.in-addr.arpaIN PTRResponse238.187.250.142.in-addr.arpaIN PTRlhr25s34-in-f141e100net
-
Remote address:1.1.1.1:53Requestandroid.apis.google.comIN AResponseandroid.apis.google.comIN CNAMEclients.l.google.comclients.l.google.comIN A172.217.16.238
-
Remote address:1.1.1.1:53Requestrat-remote.onlineIN AResponse
-
1.3kB 6.0kB 9 8
-
1.4kB 40 B 1 1
-
11.2kB 12.7kB 34 37
-
455 B 40 B 2 1
-
8.6kB 8.9kB 26 36
-
3.7kB 11
-
70 B 86 B 1 1
DNS Request
ssl.google-analytics.com
DNS Response
142.250.180.8
-
56 B 72 B 1 1
DNS Request
google.com
DNS Response
142.250.187.238
-
74 B 113 B 1 1
DNS Request
238.187.250.142.in-addr.arpa
-
69 B 109 B 1 1
DNS Request
android.apis.google.com
DNS Response
172.217.16.238
-
63 B 128 B 1 1
DNS Request
rat-remote.online
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
Filesize
16KB
MD57b9917e99169743d46d37a0e630ed19e
SHA1c0daa3b5de6587257fd111de429132931d2743fd
SHA2564c76d7ab640d5c1045da7f6893337cd1ae4b59f25a99f18e329aa2636bccf86a
SHA5123b283c5904e3030e1606bcd4b224b80c9b640abd49abdc846bf5fb4316e008642ea0022966c7ff6322b4c1793f716afde302065f41b0462d3923eba8c4b004d7
-
Filesize
16KB
MD51893054e5b0a5d6a96df4894454cbab4
SHA136df990ee39de1e31db2924c52c5466869fc56bb
SHA256332fb2484c3be50fbdbc660562341b281a3d80590ffda2886e198bc1833cca05
SHA5128029c388efa38bb6eb4e5d248d61c6adaf60f96b2f29b638224535cf640b5178cd3d28953c6f4ac436f0ba170aa5d1145244c00f9117f6c3050319e0b83214c6
-
Filesize
16KB
MD591912f63507bf5879b7f7358ed1ee1aa
SHA15a2754ffe4ced08ac11b5acddb7e9d8eb95578ab
SHA25659e930e469d078d29fd6d0c071a85b3c06ef841ee4743226f030807004f7038c
SHA5128b92b5a03f154b8e5effc6bdd971448e354dbc4111f6e9aaa40b0eea5e8400500d5459bab3831c47ba43f7282d344b5e097ec1d34c4ee70796b04f51a5c3e110
-
Filesize
16KB
MD5eb52a90bb70b76e946b62f50b6f7fb85
SHA142d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA25648472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
-
Filesize
8KB
MD5dba4e05e2505cdaa3c05a9b899b3e086
SHA1555c0524d4f9267ae5d4ea40c648886065fef5b3
SHA256cd0396a83c60028f7510a76657f08461a29f65203a13940dc987748f7a7e6fe2
SHA512fd6714decb1f2f3627beb67e258f2b824463de8dbb8c805098ec03b618c1e414bd5ecc32b4cde9aaa201d1fe5c4408de4b4fd2816b18e83687e878afa08be2a8
-
Filesize
8KB
MD5b347f2116692c59b107d7ee86f3b8124
SHA189a6bd58b3c7c4fd9e7ef6047a994d3503f31a72
SHA256888ef8a93804241ef77108aefe9f06716ed3f1116ef8aa1c4e0f8db697557567
SHA512a9490bdb3a3f17e3b9a930feee5e66d5871edb079f30656d0ebf3b2fe72663e13709d9f766afd99dafe2f5ece6602e70b06c15bc655a53ce3e6ccb2d3e6ad8e7
-
Filesize
512B
MD59e90c710ffefee11cd87ad3680af10fb
SHA1517ed985ce486441d322908b0a344b975a04acbb
SHA256922c3e65ffb4beae5aee578f9eb7c3ffa17be8ae4391a3c9676c808f8079a1e7
SHA5121cae58f7aa90c641767c8bac4613a2a36c76d3a64ff004e561fd22f4bed53b39fb864e9af9299916f332b5060813fa122481f1be277bdf0fdfe56d1521baccce
-
Filesize
8KB
MD5afe97fa2fc6e1c5e265b4bb028ca2e80
SHA169eb20e7d0d09fc83c7acced80767e222e5b32a4
SHA2560afe4e6a434f3cdc8a079b4569409705d6ed616dc4f80e738902086ee16cc22c
SHA512e7109c384f6642cf19f2c64082a33c3b28b9829182abd53b1c442e3576c0b32bf70b5d98b06cf50fef9d70cc5ab40078e54181aee5723cb6b3284597bf5fe492
-
Filesize
4KB
MD55c251f584c749c5542e523d2954754ab
SHA1752fef3fa7c02246f5d6b6d7e1bd871aa7cdf9fa
SHA2564e3c979e328bda10973918a822aab45b8b1a73dca597e8b5807297e3bbd70e44
SHA512b7b14cf5aec760df24261bb0fba0726479756eaf6b5dab71dea1ae871b8bd31170e758dd06084494a5ccd8088551246cc55950061c74d561f7ebd61fde4d6e0b
-
Filesize
8KB
MD5e4b2b36558b9e3ebe71f5344efe19f3f
SHA178c4104869a3777025c5c09307d6cebd17f51afb
SHA256addb37cdb556374da5dd65b61a33d5f2bc1e55a55def64968f7149b00c30e757
SHA51282ebc23ab5af72252b6901c0dc01b8ac80d00a10a8b4107e1f15e64e272fe49d54b15eacf4423bcbb1b63acf0e307dacac20f692a4950eb583a192e93c049f33
-
Filesize
569B
MD51c1c3549ced4eccad0a23f05f4909f3c
SHA1bc681b49b61327b4e1e4411d3fe1bdfdd8d5c3cf
SHA256ecbc6bcf571bef0515e8c61cbf0c989b8b337640897d606d9485f69dc55cd6f2
SHA512085d63517fecb4c0eb3a30f555e1ac61ec9779d90ffbd04f1a7258db90a1331995dff5485236b4cbbba6af3bbc0b0672bd113abc0689bec89566103a1ca92979
-
Filesize
90B
MD5c8741c6c49f8b3575a0afe620a2a9613
SHA1cdca936a41f4e5de5db6d27399ef08d21d8a579b
SHA25618ec115e0f49aa8acb8dcfc503334756747ee5f374f5e2aa2b7d40b720e2e054
SHA512429b261dc68cc68d2934fbfe41f6533e0274b4affa414b8b04b03528536dfc40beee9cc9864185be79bb790716c71e743bb1c2245734fafc9f2cdc686b0e4daf