Analysis
-
max time kernel
47s -
max time network
67s -
platform
android_x86 -
resource
android-x86-arm-20240221-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system -
submitted
27-04-2024 04:12
Behavioral task
behavioral1
Sample
client.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
client.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
client.apk
Resource
android-x64-arm64-20240221-en
Behavioral task
behavioral4
Sample
client.apk
Resource
android-33-x64-arm64-20240229-en
Behavioral task
behavioral5
Sample
client.apk
Resource
android-x86-arm-20240221-en
General
-
Target
client.apk
-
Size
807KB
-
MD5
c91b968b11bb2ac894739c48d7ca9aad
-
SHA1
7e5ade3831be1a3eb03bcc8d0abdb407118379b2
-
SHA256
ea9d481ce2c87fb6190d69533cddac9704800842a33465aab1186419440b2f15
-
SHA512
97e25b68a205a80cd1fb31a32ecc872e6c475a60f4b81c36b37eb2a5c57dcfbc9023f40bba442e531ce7deb3afe4ade4998baba1aec0e981aa2beb5892dc0e9c
-
SSDEEP
12288:OGPRulAkACIrK7Z0C9HDrdvhj3KGLaD26C9XgqRCIlNE8Z6GvhZT:rQp7IrKuC9HdvhjKeaDnG5Zv
Malware Config
Signatures
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
Processes:
yps.eton.applicationdescription ioc process Framework service call android.app.IActivityManager.setServiceForeground yps.eton.application
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/yps.eton.application/files/config2024-04-27.logFilesize
171B
MD521676fbd5468839212e1178bc9610cd0
SHA15e32fa497429f8ef06e8bed811f5298ebeb84ddc
SHA256a6ce98ea40ddb3a822e9591e7b50e46e25ad360c8e39f319cf94fdfddf41bc8b
SHA5129580d96bc3acef85230cbe85eacdb9f022dd7edc79d2734c483e2c768d7144f70366cfb25d1d72163aa2989f1d8982cba186883fdcbc6207082cdcb626ff04a1
-
/data/data/yps.eton.application/files/config2024-04-27.logFilesize
152B
MD5226fe43b76d7926e76a33de1bb736a11
SHA19a1f10e2233018ff8527dcae20f1bc2375a4ac4f
SHA256e66460acd11278237ba3868e243aeebfb2342f5d05a21e61cc0a374622d37373
SHA512c517340197a66eeb7a111bdb6b1204b34593c160f275aa908d73a3453fc8e645e5c2261a29f6c27b04ed23b21093721f74dccc879715882b93a5ef3d259658fd
-
/data/data/yps.eton.application/files/config2024-04-27.logFilesize
183B
MD594244fd2666361e585b463173c0b830f
SHA1ea10fa3116db56523f92b1b57b116d24b4dc69fa
SHA25631631c7a6e15e93624de3ec208b80476a664d7d2044faa2f8d2636529bc77344
SHA5129e6df8c640631cc86a247fae99371bdd880672d8dc9bc599056cd5f9009e02d0c2e61bc13b1e54f5dfab3490f803eac73bf08caa4820136e647e055324c41885