a1cba1f118b291c51b4c71dbf4cad70ea01d252348feae118afeba9743656dd5 | Triage

Analysis

max time kernel
157s
max time network
154s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
28-04-2024 10:48

Sharing

Report Analysis Logs

General

Target

System Update.apk
Size

533KB
MD5

306eaf9f6351404608518fe31c89fc36
SHA1

e64de39475b7f8114bed6e0da65aa1ee0dd46548
SHA256

a1cba1f118b291c51b4c71dbf4cad70ea01d252348feae118afeba9743656dd5
SHA512

da802268477c80abcfbefe4dd80fb2f366509eb57059a7df2c49d7aecb4f59e6ebb93197f65879095e29eb9b59ab4e9d6ba03ca5a9b05d1f1972acfa248812d1
SSDEEP

12288:UjRH6+O//n3tKpSsM+1HA+595cVS3EVqPlR6i0Ci3jM34D9x:UN6+ONjstga7OS3EW6i0C+M3Sx

Score

8^/10

collection evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs
stealth trojan evasion

Suppress Application Icon
T1628.001

Processes:

com.elite

pid process

5105 com.elite
Reads the contacts stored on the device. 1 TTPs 1 IoCs
collection

Contact List
T1636.003

Processes:

com.elite

description ioc process

URI accessed for read content://com.android.contacts/data/phones com.elite

com.elite
1⤵
- Removes its main activity from the application launcher
- Reads the contacts stored on the device.
PID:5105

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Suppress Application Icon

Credential Access

Discovery

Lateral Movement

Collection

Protected User Data

Contact List

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads