bbd12bd5eaabed07f670a8fe681ec52705a45ddb7e4f9f2b304188e62d25294d

Analysis

max time kernel
142s
max time network
156s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
10/04/2024, 13:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bbd12bd5eaabed07f670a8fe681ec52705a45ddb7e4f9f2b304188e62d25294d.apk
Size 40.2MB
Sample240410-q7wsjsaa47
SHA256 bbd12bd5eaabed07f670a8fe681ec52705a45ddb7e4f9f2b304188e62d25294d
MD5 cd066328c9d37853e7926ac1e56b8a17
SHA1 adda21c58cfa2fe741cc83ce3c683d078a9cadad
SHA512 bc2c15acebdf38d1a89d137c766fe3f0f29b1e3d30056e1bf6a02af272efe3077be6e9fd37fc2da36a8a4a8e649717209eb1e850899e1638b966f88d63cffd41
SSDEEP 786432:gFrKkacrqdJ7BWSU+7GDPU9W8XDBEu1l2XucIn8V4nr:IK4ri7W+7wPn8Su1rcIn8Cr
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
4399	com.androids.services

com.androids.services
1⤵
- Removes its main activity from the application launcher
PID:4399

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

myvideo.mp4

Path /storage/emulated/0/._AOMMGDS/myvideo.mp4
Size 38.9MB
SHA256 a26fd3007e71fa024cb53169f2701c5c120637fa2e91005669984de86a94262e
MD5 a2799a5d8e7251ff40599ee7deb26a00
SHA1 876504e40f3db326d80aa239f3b039c1df34ff8d
SHA512 d92664fd4f47a55e4e8849c151e531e1a2c03bacf5a8e809f6d48930985d0a85494b5499378fe3b0274cb89124b4bb9dad901ecf03285addda4240f03418bda1
SSDEEP 786432:kkacrqdJ7BWSU+7GDPU9W8XDBEu1l2XucIn8V4nl:k4ri7W+7wPn8Su1rcIn8Cl
MD5 SHA1 SHA512 SSDEEP

Submit Download

._KAMASET_

Path /storage/emulated/0/._KAMASET_
Size 135B
SHA256 b21d4ac574103ef294b03f74bc112aecab1e7d21c7842e2e0e921687b4e30acc
MD5 497ae4161780f016e40f8ea9ebc364f0
SHA1 679408ad040ce1de102ca8b349ddc9f6a4f6d2ab
SHA512 0e1e025d0af7e54cdc1d389a060c71fca91f8c1c8d75d3c92bd97d87ebd47c93ae0e3b8bebc709144825db4d2904fd708a69c1d878142e9ff7096474b61bd099
MD5 SHA1 SHA512