Analysis

  • max time kernel
    25s
  • max time network
    38s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240221-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
  • submitted
    23-04-2024 09:25

General

  • Target

    TAK Tracker_4.9.0 (afde5034)_Apkpure.apk

  • Size

    17.6MB

  • MD5

    e9f9c8c246600acc7b3b62d3738db599

  • SHA1

    f6149422b1037b5e5906f59e7c8e8b6828afad34

  • SHA256

    9ce269bab79d106c5c5d1ec015960b7c20af44fa6672eb589b9899cfa41762c8

  • SHA512

    d452b5acaa13a800583ca4718cc0e618cb7d06ca853bc6c6ac78f8b07817f63524c96f85b84bb012037fd318b73bd1341e70e13a8c2212bdeca41efca2aeea95

  • SSDEEP

    393216:VKdSfmXn/i30+JW6dfQMOiL8agoG9JVO/kx76uktCceu4ifOD8BTAY:VQDnc0+Jldfn8noHsxfkveuu4Z9

Score
7/10

Malware Config

Signatures

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

Processes

  • gov.tak.taktracker
    1⤵
    • Makes use of the framework's foreground persistence service
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:4366

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads