f86bd0cd33ed180d8900669ca646a534ea9a9e96d6eee05efd72d89bb3622490

Analysis

max time kernel
148s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240506-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system
submitted
11/05/2024, 22:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f86bd0cd33ed180d8900669ca646a534ea9a9e96d6eee05efd72d89bb3622490.apk
Size

4.5MB
MD5

01dc47b491e0320faf86a1e3f1bc074e
SHA1

e13074f8bb9ff17905fd05f34ecd803fe2df52ab
SHA256

f86bd0cd33ed180d8900669ca646a534ea9a9e96d6eee05efd72d89bb3622490
SHA512

c3ab796cbe3de32a83e881a8bb16969ba0c37839d55ee4580a828440e50b49d07bf66b161543763058a73103696f2d3f4e6071e659f34d72897aae136f83825b
SSDEEP

98304:+ZPXtjfFy1hnrmukrP/pM/7P+1wxM5IMWkAoTwr0n:+ZljtQzkrXpSPC7/

Score

8^/10

evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
4287	com.alpras.manager

Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Intent action	android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS	com.alpras.manager

com.alpras.manager
1⤵
- Removes its main activity from the application launcher
- Requests disabling of battery optimizations (often used to enable hiding in the background).
PID:4287

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

User Evasion

T1628.002

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.alpras.manager/files/profileInstalled

Filesize
24B

MD5
f7d0b0ccf0c24d7bd759511e5b8cc82d

SHA1
cbd4443ab5b5687a51d08e408354f8d607cd21b3

SHA256
2aaf8fde61b234952a76b7722d78d39279731ab04d454d13a2c8dfe7aad20b49

SHA512
7d194c989352e7ea9c9ba852a6f10352c44e6e980a19b93029fb2e8047eba1426c7b97674b9f13a63e7132d62082dafb58f897b989e6ac3fb591f071894fb03d

Download Submit
/data/data/com.alpras.manager/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
000ee30908a19b87a5e900b0ad25aaa3

SHA1
80cdb6dd236e9efc9d2646d8451837864c976dab

SHA256
d289c8331d123295af4a9ed6eda609c06b87f192c6aa17cac6402d60caca2f0e

SHA512
f707e81bd179bd92f42f12f27ac684ee2421846b84a738b1cd9ec367e9d7e2011eefb1f396a23224ff01d026ffb41a8a823aa6d703f47612d77478167cbf6ba5

Download Submit
/data/misc/profiles/cur/0/com.alpras.manager/primary.prof

Filesize
1KB

MD5
ba816e90ddb2d3855b63809941c44064

SHA1
50d1876884ed92c33d435922980052b4ae4637af

SHA256
76ef799426b3d1263779c23dedb024a0e3909b556385820248f46a5698bb6391

SHA512
b0e6bd835ba73e3ad566f863a76ab9b485d2785f5074cd6c1354c779cd06406a4b734ebc365746e8dd7233ce9e76747fb7bebcaba6013c2c77bf75a4e15029b4

Download Submit
/data/misc/profiles/cur/0/com.alpras.manager/primary.prof

Filesize
4KB

MD5
213ca14981d25795df7fd4e5b39dc730

SHA1
b4e991c42d58a44e85eeab95ef55b1ece4382f10

SHA256
025352c61855ae2aa2db6bcf9331ba2acc831f391904ffadfb9cc0def5809892

SHA512
1f8bad37a622caaf3dccedff1b05a880a3d5137410a57598dc1efa0dabf30d02c7a1b8f7ac3efd487f156b17ec00d29d6e1a920bf12234b3bf7ed3672126febb

Download Submit