Analysis
-
max time kernel
179s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
21-05-2024 22:02
Static task
static1
Behavioral task
behavioral1
Sample
7de4ea0905b78f3fc7265e82827006ce10d948c6a09d7d21571466596ca5c454.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
7de4ea0905b78f3fc7265e82827006ce10d948c6a09d7d21571466596ca5c454.apk
Resource
android-x64-20240514-en
General
-
Target
7de4ea0905b78f3fc7265e82827006ce10d948c6a09d7d21571466596ca5c454.apk
-
Size
4.5MB
-
MD5
ebbf9f4ffc587734c752c61c80d290d6
-
SHA1
50ce87330ad78042b1bb71c889b3b2fa5d29ca61
-
SHA256
7de4ea0905b78f3fc7265e82827006ce10d948c6a09d7d21571466596ca5c454
-
SHA512
e0ab5f0ffb0d4ad85a3f019f67853ec524beb3564b9e8055874e691f016322fef8597d54b9b4fd9f61aa67c208a56bb99dbddef1f72a84a25437b444824d0ece
-
SSDEEP
98304:R24Eeg10bfqmT3tMj/fEGCD0ZWkAoTwr0k:R7EGmmTufEqq
Malware Config
Signatures
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
Processes:
com.alpras.managerdescription ioc process Intent action android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS com.alpras.manager
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.alpras.manager/files/profileInstalledFilesize
24B
MD55f87fd739fc17024d2f6c71f43a66c06
SHA1c020081082fd22a82e83e34107aba9aabf2256ea
SHA256cabc514b9abf85a8b442d61d418ffba6463635db2e8b97d20cf9ad9e946d8090
SHA512b7a2dd6a624a3826e49f9d1634f96abdac0a84138a84ccd2cdf13c8cfc47ae3c4759572e39ec7cf447516a3dd6485fdd8d138c49c65f6bc01bb15ba708efc8b0
-
/data/data/com.alpras.manager/files/profileinstaller_profileWrittenFor_lastUpdateTime.datFilesize
8B
MD5a6faec4df9d4d66ee0403c9f2c9675af
SHA1f0d52b3e24236f89f1a48d9c5d990a7bae567e29
SHA256a8e04ce1bc85ffee2a21c5d2bccdc42bcb85c293a1947e35cb2e570670177613
SHA512fe596dbe707af50826e5bc60e0d81ceedc4743ed2255fb7df257e6adad4308a1b7b5a9c56f9308e3d7de1794ba2366c459e628f9433d898d2b303c49261d4d64
-
/data/misc/profiles/cur/0/com.alpras.manager/primary.profFilesize
1KB
MD5c295e48bf83190c2fc7d0bd1103cd66c
SHA101a15192453ad3717dc1cf791271464665cea381
SHA256c83a908835f38c222e18f8ba587b153442bdec4fd5ec7a2de24cc8fe798d8702
SHA5128676dcb5f85857190fb17a102f9977cd065794d33a618c4b10553c6bbae6adf3fdaf91b4c1eb83e160faacc0236dd0a83e10c99946666bcaf0cbb87af1b101d5
-
/data/misc/profiles/cur/0/com.alpras.manager/primary.profFilesize
4KB
MD5135c0f5339209ec95fa7af3686716657
SHA191b2a9c3185b0446d22b65518bb5c775c0229519
SHA2564ab683f0c78de35f9cc58f44a6f4729951c0790a693fea6f9603ece9f7fa5a2f
SHA5126fc5fa810904674b6afb78aaa17f1f7e090513ea2f2cf338ba83a1e683eb24635ce0d2ce0f57b01994a76f5a3a0a23ff120649fb53a0ef366a5e3a4fcfc53edc