41419a535e1492f32751e19db78bd1f71736b6d3e51fd93feeb65fad36497367

Analysis

max time kernel
99s
max time network
159s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
26-04-2024 20:20

Target

TASKMANAGER.apk
Size

256KB
MD5

20d8603314a52b75dad2a577ef785063
SHA1

52a1c165f0346198f1c7af72a964b59df98b2672
SHA256

41419a535e1492f32751e19db78bd1f71736b6d3e51fd93feeb65fad36497367
SHA512

6b15cc190ac09620170afea44c5354472166b1483364b231745bd4d6b1a7f47782f74f69f65e2852d843ee9fcf5470c61cc1d6d3a64b1b9a740f24e585cc08b0
SSDEEP

6144:Gtr/W679Wl+MJR2mEvLWFmglzdiIvBSJI7HarCcgxsA:GH9W1AzglzNJ+I7a0xJ

Score

8^/10

Removes its main activity from the application launcher 1 TTPs 1 IoCs
stealth trojan evasion

T1628.001

Processes:

com.etechd.l3mon

pid process

4418 com.etechd.l3mon
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

T1414

T1641.001

Processes:

com.etechd.l3mon

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.etechd.l3mon

pid	process
4418	com.etechd.l3mon

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.etechd.l3mon

com.etechd.l3mon
1⤵
- Removes its main activity from the application launcher
- Obtains sensitive information copied to the device clipboard
PID:4418