84c2d61e083fa5f9c8118738c4c0bebc15de31d6f9cf416f9cced7aef6aecc56

Analysis

max time kernel
3s
max time network
136s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
10/04/2024, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
84c2d61e083fa5f9c8118738c4c0bebc15de31d6f9cf416f9cced7aef6aecc56.apk
Size 17.0MB
Sample240410-phra4afd22
SHA256 84c2d61e083fa5f9c8118738c4c0bebc15de31d6f9cf416f9cced7aef6aecc56
MD5 2e70192831896872b504a4c4ad674505
SHA1 570396392bf74362cb28288397147d7c6c7b817e
SHA512 2d8e473f35d7e86a17dc9de2af5a0c8569922ecd7e4755ceb5e9f5ce2a4a0e7a22f8c27291365a89433a99aba070e23b2b713376312bc83ab8e59eaa0e8085f4
SSDEEP 393216:yYThy/z57aggCMoqIKW8pRdbqZlKcbc9x2H3sc5DqXOK3VLx:3k57JYWCRdbylRH3sKqeKFLx
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
5048	com.gellery.services

com.gellery.services
1⤵
- Removes its main activity from the application launcher
PID:5048

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

._HAEDASET_

Path /storage/emulated/0/._HAEDASET_
Size 150B
SHA256 fa9ff2031e1b6325a2a763cff6c17323ad5cb1b6a63c336963534f855f9c09c3
MD5 99f8fe9da665508c8568b226e1d0ed07
SHA1 47002c616ca032dae510b272114a2c8238225585
SHA512 43a48f31019475d2b0d5914799970d788f30d7ddfea5c49837d884fa681d4a88ccb74154948613cb05e7566217d2df741684e0cdf80acf0eb13d57342dbb052c
MD5 SHA1 SHA512

Submit Download