b0e9ab76234b3000652b83b84ff97bfd6d534eaba884daa6b892b79cd043872f

Analysis

max time kernel
149s
max time network
145s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
04/04/2024, 12:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b0e9ab76234b3000652b83b84ff97bfd6d534eaba884daa6b892b79cd043872f.apk
Size 587KB
Sample240404-prqqxsfe2z
SHA256 b0e9ab76234b3000652b83b84ff97bfd6d534eaba884daa6b892b79cd043872f
MD5 2ec96ebfe76b74df197a1a3680fb0b3c
SHA1 aee79ecfb557181a521d44738d5dd839eddcd16b
SHA512 d84e627b51b61a88686742719377a9152057f4a2f8a6940f8e615d0a25e0f6b2e030d8338066e088a8dcc856e0d5676bcb5278cc2a633ba080f3600c17ded205
SSDEEP 12288:ImGKjaxLoE6YArQNsdZFn27+RiETGDiz6/3Cw4+6MzMeqJrEN46Pb:ImGnofY1NsdZFnk+Rxz6/3wEYn6D
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
5028	com.progresslab.conversation

com.progresslab.conversation
1⤵
- Removes its main activity from the application launcher
PID:5028

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Config

Path /data/data/com.progresslab.conversation/files/Config
Size 337B
SHA256 463b6d64fbb3ea21ff3f0c7f1047d9f4efb4afa0e33c85cfa83cf0015aca3c41
MD5 37424adef3f6a97a5d85d16ed9ea99fb
SHA1 f273aa37fd8202ed9237023a1ca826a5c64acad1
SHA512 539d9fa8c048d0e55562b82252a29d1ef8427800672a3df26ae1b8e04f1810c152076f9a89492b867c4d0278417be0bd19f51033984c8a8526739bcc5f18151f
MD5 SHA1 SHA512

Submit Download

Timer

Path /data/data/com.progresslab.conversation/files/Timer
Size 368B
SHA256 7b7a845aca1ff1abd164c31ad4fdbc9b3a9ce16b94ed26a4b58422f96739c21c
MD5 346b28ab1db39367edc52a13ea60e1b9
SHA1 79ff599228bfa9a14d3039db1151bdf73f869c65
SHA512 1b6e28af17510207579531eb4ced76bfd003b448aba1d16fc294cd2f2afced152e74bc85dc32b4d83c8190057c18bf44ef2401789ae29653cba28d02e73117c5
MD5 SHA1 SHA512

Submit Download

Timer

Path /data/data/com.progresslab.conversation/files/Timer
Size 368B
SHA256 57df940efa343e314d6db1931b11193a9ba2e50f4bbe54b0037837fe40e52fe2
MD5 58950704cec329f6e9ee505f931bc461
SHA1 ac4efbf5bc1432e810558efb479367b6611a146f
SHA512 6fd84e66739e4f35bf7d717d7d47f581e05280e9872ffa6b1f85a8fe82d3f5893ac0a6bf680c80259f997db23b1ae873641e4b24b12c4dbb7c35d897dd562555
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads