Analysis

  • max time kernel
    179s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    21-05-2024 22:02

General

  • Target

    7de4ea0905b78f3fc7265e82827006ce10d948c6a09d7d21571466596ca5c454.apk

  • Size

    4.5MB

  • MD5

    ebbf9f4ffc587734c752c61c80d290d6

  • SHA1

    50ce87330ad78042b1bb71c889b3b2fa5d29ca61

  • SHA256

    7de4ea0905b78f3fc7265e82827006ce10d948c6a09d7d21571466596ca5c454

  • SHA512

    e0ab5f0ffb0d4ad85a3f019f67853ec524beb3564b9e8055874e691f016322fef8597d54b9b4fd9f61aa67c208a56bb99dbddef1f72a84a25437b444824d0ece

  • SSDEEP

    98304:R24Eeg10bfqmT3tMj/fEGCD0ZWkAoTwr0k:R7EGmmTufEqq

Malware Config

Signatures

  • Removes its main activity from the application launcher 1 TTPs 1 IoCs
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs

Processes

  • com.alpras.manager
    1⤵
    • Removes its main activity from the application launcher
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    PID:4282

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.alpras.manager/files/profileInstalled
    Filesize

    24B

    MD5

    5f87fd739fc17024d2f6c71f43a66c06

    SHA1

    c020081082fd22a82e83e34107aba9aabf2256ea

    SHA256

    cabc514b9abf85a8b442d61d418ffba6463635db2e8b97d20cf9ad9e946d8090

    SHA512

    b7a2dd6a624a3826e49f9d1634f96abdac0a84138a84ccd2cdf13c8cfc47ae3c4759572e39ec7cf447516a3dd6485fdd8d138c49c65f6bc01bb15ba708efc8b0

  • /data/data/com.alpras.manager/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
    Filesize

    8B

    MD5

    a6faec4df9d4d66ee0403c9f2c9675af

    SHA1

    f0d52b3e24236f89f1a48d9c5d990a7bae567e29

    SHA256

    a8e04ce1bc85ffee2a21c5d2bccdc42bcb85c293a1947e35cb2e570670177613

    SHA512

    fe596dbe707af50826e5bc60e0d81ceedc4743ed2255fb7df257e6adad4308a1b7b5a9c56f9308e3d7de1794ba2366c459e628f9433d898d2b303c49261d4d64

  • /data/misc/profiles/cur/0/com.alpras.manager/primary.prof
    Filesize

    1KB

    MD5

    c295e48bf83190c2fc7d0bd1103cd66c

    SHA1

    01a15192453ad3717dc1cf791271464665cea381

    SHA256

    c83a908835f38c222e18f8ba587b153442bdec4fd5ec7a2de24cc8fe798d8702

    SHA512

    8676dcb5f85857190fb17a102f9977cd065794d33a618c4b10553c6bbae6adf3fdaf91b4c1eb83e160faacc0236dd0a83e10c99946666bcaf0cbb87af1b101d5

  • /data/misc/profiles/cur/0/com.alpras.manager/primary.prof
    Filesize

    4KB

    MD5

    135c0f5339209ec95fa7af3686716657

    SHA1

    91b2a9c3185b0446d22b65518bb5c775c0229519

    SHA256

    4ab683f0c78de35f9cc58f44a6f4729951c0790a693fea6f9603ece9f7fa5a2f

    SHA512

    6fc5fa810904674b6afb78aaa17f1f7e090513ea2f2cf338ba83a1e683eb24635ce0d2ce0f57b01994a76f5a3a0a23ff120649fb53a0ef366a5e3a4fcfc53edc