7d59e24f4bdf28a846d21e2608796f7e91389c4778bec75369d7b05e3f8449a5

Analysis

max time kernel
74s
max time network
86s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
13-04-2024 18:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

mobelejen.apk
Size

549KB
MD5

45be5a7857a4fa1c5eadd519e9402e8a
SHA1

36feb0809c1853f9a1f6d587302691abd7ce90e9
SHA256

7d59e24f4bdf28a846d21e2608796f7e91389c4778bec75369d7b05e3f8449a5
SHA512

46c869051e0c97b68f4388b87caecd82bf7362110a34ebb28ddc5fcd6c8a0e339eeaafbfce54d22593e245457fae7ec4c36b49a8556d3327ba7f90a40dd96a73
SSDEEP

12288:9cVS3EVqPlR6i0Ci3jM34D9zSxjRH6+O//n3tKpSsM+1HA+3De7:9OS3EW6i0C+M3SziN6+ONjstgYDe7

Score

8^/10

collection evasion privilege_escalation stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs
stealth trojan evasion

Suppress Application Icon
T1628.001

Processes:

com.elite

pid process

4190 com.elite
Reads the contacts stored on the device. 1 TTPs 1 IoCs
collection

Contact List
T1636.003

Processes:

com.elite

description ioc process

URI accessed for read content://com.android.contacts/data/phones com.elite
Tries to add a device administrator. 1 TTPs 1 IoCs
privilege_escalation

Device Administrator Permissions
T1626.001

Processes:

com.elite

description ioc process

Intent action android.app.action.ADD_DEVICE_ADMIN com.elite

pid	process
4190	com.elite

description	ioc	process
URI accessed for read	content://com.android.contacts/data/phones	com.elite

description	ioc	process
Intent action	android.app.action.ADD_DEVICE_ADMIN	com.elite

com.elite
1⤵
- Removes its main activity from the application launcher
- Reads the contacts stored on the device.
- Tries to add a device administrator.
PID:4190

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

T1626

Device Administrator Permissions

T1626.001

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

Lateral Movement

Collection

Protected User Data

T1636

Contact List

T1636.003

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads