f876b2a60d4cf7f88925f435f29f89c0393f57a59ec46d490c7e87821f29fc0f | Triage

Analysis

max time kernel
32s
max time network
150s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
10/04/2024, 15:01

Sharing

Report Analysis Logs

General

Target

f876b2a60d4cf7f88925f435f29f89c0393f57a59ec46d490c7e87821f29fc0f.apk
Size

528KB
MD5

9237706661637dc0bc980fd390b5de72
SHA1

798f936d02285c8f61d33afba8a0c41432b91a11
SHA256

f876b2a60d4cf7f88925f435f29f89c0393f57a59ec46d490c7e87821f29fc0f
SHA512

8d05409121c484da1c0f6b8785ac22e4d6e98ac90786a095df6814e9d0c00602e9f324775949fd60822de983a170152d514a44b1ef24ddae512c184ec8695340
SSDEEP

12288:El3X7DlCEx+JVTao9gvf/XTaw8sKfbCqn2XXHbl4TVB5pN/7A:El7DcbjT8H/jaw8sFqnyHblmVnpN/8

Score

8^/10

evasion privilege_escalation stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

pid	Process
4177	com.pdf.google.vv

Tries to add a device administrator. 1 TTPs 1 IoCs

privilege_escalation

Device Administrator Permissions

description	ioc	Process
Intent action	android.app.action.ADD_DEVICE_ADMIN	com.pdf.google.vv

com.pdf.google.vv
1⤵
- Removes its main activity from the application launcher
- Tries to add a device administrator.
PID:4177
- su
  2⤵
  PID:4205

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Device Administrator Permissions

Defense Evasion

Hide Artifacts

Suppress Application Icon

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads