b0e9ab76234b3000652b83b84ff97bfd6d534eaba884daa6b892b79cd043872f

Analysis

max time kernel
149s
max time network
160s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
04/04/2024, 12:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b0e9ab76234b3000652b83b84ff97bfd6d534eaba884daa6b892b79cd043872f.apk
Size 587KB
Sample240404-prqqxsfe2z
SHA256 b0e9ab76234b3000652b83b84ff97bfd6d534eaba884daa6b892b79cd043872f
MD5 2ec96ebfe76b74df197a1a3680fb0b3c
SHA1 aee79ecfb557181a521d44738d5dd839eddcd16b
SHA512 d84e627b51b61a88686742719377a9152057f4a2f8a6940f8e615d0a25e0f6b2e030d8338066e088a8dcc856e0d5676bcb5278cc2a633ba080f3600c17ded205
SSDEEP 12288:ImGKjaxLoE6YArQNsdZFn27+RiETGDiz6/3Cw4+6MzMeqJrEN46Pb:ImGnofY1NsdZFnk+Rxz6/3wEYn6D
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
4451	com.progresslab.conversation

com.progresslab.conversation
1⤵
- Removes its main activity from the application launcher
PID:4451

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Config

Path /data/user/0/com.progresslab.conversation/files/Config
Size 337B
SHA256 463b6d64fbb3ea21ff3f0c7f1047d9f4efb4afa0e33c85cfa83cf0015aca3c41
MD5 37424adef3f6a97a5d85d16ed9ea99fb
SHA1 f273aa37fd8202ed9237023a1ca826a5c64acad1
SHA512 539d9fa8c048d0e55562b82252a29d1ef8427800672a3df26ae1b8e04f1810c152076f9a89492b867c4d0278417be0bd19f51033984c8a8526739bcc5f18151f
MD5 SHA1 SHA512

Submit Download

Timer

Path /data/user/0/com.progresslab.conversation/files/Timer
Size 368B
SHA256 3e7d08e283aff5163ab965064353d953a1e8c2f35606aa657b05f102ea495360
MD5 735ad521cad27b0a18efe0adba93ef42
SHA1 c470f735df86ef16aa9394e0826a0769b35ca3db
SHA512 b1271f02b1004b77c72b1b42e86292180874428dde00bfbc0628621fc6bdaccadd121d9672946d0032ce40b129ecbb71445887ea5d33893aaee044f6c49e4c19
MD5 SHA1 SHA512

Submit Download

Timer

Path /data/user/0/com.progresslab.conversation/files/Timer
Size 368B
SHA256 747a770f3f653f6109f1ed0795ecf17f6bb133af2bd1f4f77244fb50dace6abf
MD5 2c25b2b39e27ed2980c846e6b5840231
SHA1 0b2448618fdbc1351fdc44338e0a7d6e0b5d175c
SHA512 02335353ded3ed1e84c8685983b29033a93351f2bd1c89e120516e688f8d91a56342a7e43fd8b3def31a10f54af238f9e24e1648c65ee69ac2f2a861d6da002f
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads