2392ddbfae7dc0fcf9280d3248244e4067ff6147bbd7e37ce964e2bf6204c468

Analysis

max time kernel
179s
max time network
137s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
19/05/2024, 22:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2392ddbfae7dc0fcf9280d3248244e4067ff6147bbd7e37ce964e2bf6204c468.apk
Size 933KB
Sample240519-1y7tkacc56
SHA256 2392ddbfae7dc0fcf9280d3248244e4067ff6147bbd7e37ce964e2bf6204c468
MD5 6d1d49ef44bb02a770a14994a3917d03
SHA1 716d24d6d395c7d5bcd19bc09dd8ac82ec8903a2
SHA512 416e11e249c78c87953f7aee89d8e7181f8322db2875ab3808d0fcfbef7690e4c0c8c946049d6e1e4b70f34e29b907a854c6e0c6c63bb6471d6c652bd1d49e1f
SSDEEP 24576:6ZG/gn4vu3+Q+K1EjV61Aqy//zRe6GpJyS4LJr:6ZGcl+O1EjIipSc
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
5238	com.spacex.runner

Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

evasion

Code Signing Policy Modification

T1632.001

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.canRequestPackageInstalls	com.spacex.runner

com.spacex.runner
1⤵
- Removes its main activity from the application launcher
- Checks the application is allowed to request package installs through the package installer
PID:5238

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Subvert Trust Controls

T1632

Code Signing Policy Modification

T1632.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/com.spacex.runner/files/profileInstalled
Size 24B
SHA256 bd0e8a8d26f5405ce87f9a71108ff5dca3d4b491d07fa51f8f22ba6dff3b49fb
MD5 ae467a0806be5c000d6e51cffac475b9
SHA1 1b4c3b6bf5fa8b4758674c623d55a6d822dc0810
SHA512 7cb83c226152d5a1d5ca2b649645f20ea9c9cba3ad4c16004a78d4e6e8fac44e3d2af3be01ea5ae50819d18e1dc02ed4d2f89367536e53f788dcc291a9f5c802
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.spacex.runner/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 9833541d55f9f5f66361b2358bcc08dc7926a4c730102a72e1617561455e5a0f
MD5 f064e6f0cf3a2f682a80a95d05dbdf9f
SHA1 6513cc7601fa85fd0d983238f701b9acee8e20ae
SHA512 40a33f5ff965a63f038fe416f61ef4b82d1f612f02dd5121e7b31ebb9769df22f4141f7635dcaec871e2b5ecbdd8804dd2b1fd6fbcbc9e1ea8b2e5f9b9933d47
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.spacex.runner/primary.prof
Size 470B
SHA256 6009ace2d2b6ce50302b522c523702936e07f6f3fa712936cf17f704f5ecfaf6
MD5 e4c5fd3a07e0ca372943054b1ee0a0d3
SHA1 2429c4ce069a75a3b847cc228d104ce2d89df9ea
SHA512 67f1b1ef5dc3a90454733a14a5122ca9dff2777d4aa4e9592d296ac419314eaf5eb3f7ed06e1284e50ebdbdf9c6e582cbec9765dbe291e91f7467951b9a645b1
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads