c854db64b9926947cb0f82d53e0dcd775f644e5c5d5a15133d03cc194e1c9689 | Triage

Analysis

max time kernel
7s
max time network
160s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
03-05-2024 09:50

Sharing

Report Analysis Logs

General

Target

build.s.apk
Size

346KB
MD5

83df4ac5ea51422f75145ac2d95c7b18
SHA1

c4f8405308257b7f669d49e92fab7484c6db35a3
SHA256

c854db64b9926947cb0f82d53e0dcd775f644e5c5d5a15133d03cc194e1c9689
SHA512

d22c271964349133a095d01c9eae03488ae59bc2c736d315f43115f93caf751b5e5784aa5ab1f04793bf4af91d5347ebe50692cb5f01743b6474476e92834ffa
SSDEEP

6144:cEPXpltG9Yqym29Fdb7Nsyjx0Vc0nfIE4JTDyq2PQrqON5Oe0HWn/rMDxobB:cERltGuqyjJbGEac0n1kDmPQrLNwe0HC

Score

8^/10

collection credential_access evasion impact stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

pid	Process
5075	com.etechd.l3mon

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.etechd.l3mon

com.etechd.l3mon
1⤵
- Removes its main activity from the application launcher
- Obtains sensitive information copied to the device clipboard
PID:5075

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Suppress Application Icon

Credential Access

Clipboard Data

Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Replay Monitor

Loading Replay Monitor...

Downloads