Analysis
-
max time kernel
25s -
max time network
38s -
platform
android_x64 -
resource
android-x64-arm64-20240221-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system -
submitted
23-04-2024 09:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TAK Tracker_4.9.0 (afde5034)_Apkpure.apk
Resource
android-x64-arm64-20240221-en
android-11-x64
3 signatures
150 seconds
General
-
Target
TAK Tracker_4.9.0 (afde5034)_Apkpure.apk
-
Size
17.6MB
-
MD5
e9f9c8c246600acc7b3b62d3738db599
-
SHA1
f6149422b1037b5e5906f59e7c8e8b6828afad34
-
SHA256
9ce269bab79d106c5c5d1ec015960b7c20af44fa6672eb589b9899cfa41762c8
-
SHA512
d452b5acaa13a800583ca4718cc0e618cb7d06ca853bc6c6ac78f8b07817f63524c96f85b84bb012037fd318b73bd1341e70e13a8c2212bdeca41efca2aeea95
-
SSDEEP
393216:VKdSfmXn/i30+JW6dfQMOiL8agoG9JVO/kx76uktCceu4ifOD8BTAY:VQDnc0+Jldfn8noHsxfkveuu4Z9
Score
7/10
Malware Config
Signatures
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground gov.tak.taktracker -
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
description ioc Process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS gov.tak.taktracker -
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener gov.tak.taktracker