e3948a5a3abbb7d7686a56ac962725c7d657a34abb9ec4a48de5d5fac38e5a3e

Analysis

max time kernel
13s
max time network
145s
platform
android_x64
resource
android-x64-arm64-20240506-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system
submitted
13/05/2024, 10:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

lock_screen.apk
Size

20KB
MD5

20d475f3acf21a2bf96d3e6b535a5104
SHA1

3d4c57582a1d41ea803a2cbd862839af1043e730
SHA256

ae2ea18bff78f50e480a96a90d704b7fd126c683480287d26a8123dfa0e6f585
SHA512

4f6f2fd1ff6707387446b5e9dce664b3243af4bfd740c6bf927624eb2fb65dbc3abb2a75a323baaa64b5ba993c8c4071e08083d1d1b82734d6a4b63f154c3fb7
SSDEEP

384:0xAuIGEoaSsiHkabGbPHAkI6EqVTv5SeYbga9JmpoNmnr:iIGWabGHA36JB5B8LO/r

Score

7^/10

impact privilege_escalation

Malware Config

Signatures

Tries to add a device administrator. 2 TTPs 1 IoCs

privilege_escalation impact

Device Administrator Permissions

T1626.001

Account Access Removal

T1640

description	ioc	Process
Intent action	android.app.action.ADD_DEVICE_ADMIN	com.tencent.qlauncher.lite.onekeylock

com.tencent.qlauncher.lite.onekeylock
1⤵
- Tries to add a device administrator.
PID:4977

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

T1626

Device Administrator Permissions

T1626.001

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Account Access Removal

T1640

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads