4c2114824eaf97c3c0ded5dea516db8dc7435a00c04aa2ac6706877908a42585 | Triage

Submit
Reports

Overview

overview

8

Static

static

6

22d0e9abc0...c6.apk

android-9-x86

8

22d0e9abc0...c6.apk

android-10-x64

8

22d0e9abc0...c6.apk

android-11-x64

8

Sharing

General

Target

22d0e9abc0cd8c6d0c9f7e3017cbb8c6
Size

7.3MB
Sample

240517-wygvxscd92
MD5

22d0e9abc0cd8c6d0c9f7e3017cbb8c6
SHA1

d3072bfa29a6ec8c5138b8903cba2283fe39a2d0
SHA256

4c2114824eaf97c3c0ded5dea516db8dc7435a00c04aa2ac6706877908a42585
SHA512

11d5163a1b5b8a9061bfff7acd99114f181af9a9a8cbd257640673266fc1149179b2a723f248d622bb56439b2bb29d5aabb5347ca055f734ec3a76dfa583e43a
SSDEEP

196608:sqUN2P0qEmxJMXHi3yMPwMlwp1fC5058RdaYNDl:o2bxfykxejM0fADl

Score

8^/10

android discovery evasion impact privilege_escalation stealth trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

22d0e9abc0cd8c6d0c9f7e3017cbb8c6.apk

Resource

android-x86-arm-20240514-en

discovery evasion impact privilege_escalation stealth trojan

android-9-x86

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

22d0e9abc0cd8c6d0c9f7e3017cbb8c6.apk

Resource

android-x64-20240514-en

discovery evasion stealth trojan

android-10-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

22d0e9abc0cd8c6d0c9f7e3017cbb8c6.apk

Resource

android-x64-arm64-20240514-en

discovery evasion impact privilege_escalation stealth trojan

android-11-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  22d0e9abc0cd8c6d0c9f7e3017cbb8c6
- Size
  
  7.3MB
- MD5
  
  22d0e9abc0cd8c6d0c9f7e3017cbb8c6
- SHA1
  
  d3072bfa29a6ec8c5138b8903cba2283fe39a2d0
- SHA256
  
  4c2114824eaf97c3c0ded5dea516db8dc7435a00c04aa2ac6706877908a42585
- SHA512
  
  11d5163a1b5b8a9061bfff7acd99114f181af9a9a8cbd257640673266fc1149179b2a723f248d622bb56439b2bb29d5aabb5347ca055f734ec3a76dfa583e43a
- SSDEEP
  
  196608:sqUN2P0qEmxJMXHi3yMPwMlwp1fC5058RdaYNDl:o2bxfykxejM0fADl
Score

8^/10

discovery evasion impact privilege_escalation stealth trojan
- Removes its main activity from the application launcher
  stealth trojan evasion
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Tries to add a device administrator.
  privilege_escalation impact
- Queries the unique device ID (IMEI, MEID, IMSI)
  discovery
- Reads information about phone network operator.
  discovery
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

discoveryevasionimpactprivilege_escalationstealthtrojan

behavioral2

discoveryevasionstealthtrojan

behavioral3

discoveryevasionimpactprivilege_escalationstealthtrojan

© 2018-2024

Terms | Privacy