e5f23ea7a7d4d5850e25500a3d686db8598106d42f2d565e3c2cffce2daea9ab

Analysis

max time kernel
142s
max time network
157s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
10/04/2024, 14:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
e5f23ea7a7d4d5850e25500a3d686db8598106d42f2d565e3c2cffce2daea9ab.apk
Size 22.0MB
Sample240410-r25zpsef2v
SHA256 e5f23ea7a7d4d5850e25500a3d686db8598106d42f2d565e3c2cffce2daea9ab
MD5 1345f89b60108074b9fa4dae349cc53f
SHA1 3a937ed0e5999e29da832599d4998ea1232e3ddf
SHA512 3ff49a7a61a4cd41cdd8a2e802fd162635b71f552551eb2885b98ea874d53815b5e68e6c47258ea12d091c1fb48ee0a3cf7fd0f4e6854ca8d2c52cc216ba282b
SSDEEP 393216:LBpsEmCl9ZuehHPcHiHBjWfrJAUN6tptBz71SDdRPDHJT1UmWoFdBbdSYOL9BtiN:q6uehHPcHKWdAYsp771WRPlTqmJV8Ptc
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
4409	video.player.android

video.player.android
1⤵
- Removes its main activity from the application launcher
PID:4409

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

bangbang.mp4

Path /storage/emulated/0/._FAHMMGDS/bangbang.mp4
Size 20.7MB
SHA256 9bf60f795d8a3947f1bbcbcbc477958cc8f82890719f0102d2d4676d4771a0aa
MD5 e8d0266eb5f751d358878d72010b0700
SHA1 6193b8f246d8c4482e7f16bc0595bc7eefc18c47
SHA512 b33d1085c2fedc8722f01e887e1ffa11fa470503de33f57e244d53f21b7f5664f5944f78a83e4969252b5c7addde00cc30b50b8f9a5ee562523ba2c5149e6dbd
SSDEEP 393216:PEmCl9ZuehHPcHiHBjWfrJAUN6tptBz71SDdRPDHJT1UmWoFdBbdSYOL9Bm:R6uehHPcHKWdAYsp771WRPlTqmJV8Pm
MD5 SHA1 SHA512 SSDEEP

Submit Download

._FMASET_

Path /storage/emulated/0/._FMASET_
Size 135B
SHA256 b21d4ac574103ef294b03f74bc112aecab1e7d21c7842e2e0e921687b4e30acc
MD5 497ae4161780f016e40f8ea9ebc364f0
SHA1 679408ad040ce1de102ca8b349ddc9f6a4f6d2ab
SHA512 0e1e025d0af7e54cdc1d389a060c71fca91f8c1c8d75d3c92bd97d87ebd47c93ae0e3b8bebc709144825db4d2904fd708a69c1d878142e9ff7096474b61bd099
MD5 SHA1 SHA512