Analysis

  • max time kernel
    178s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    21-05-2024 22:02

General

  • Target

    7de4ea0905b78f3fc7265e82827006ce10d948c6a09d7d21571466596ca5c454.apk

  • Size

    4.5MB

  • MD5

    ebbf9f4ffc587734c752c61c80d290d6

  • SHA1

    50ce87330ad78042b1bb71c889b3b2fa5d29ca61

  • SHA256

    7de4ea0905b78f3fc7265e82827006ce10d948c6a09d7d21571466596ca5c454

  • SHA512

    e0ab5f0ffb0d4ad85a3f019f67853ec524beb3564b9e8055874e691f016322fef8597d54b9b4fd9f61aa67c208a56bb99dbddef1f72a84a25437b444824d0ece

  • SSDEEP

    98304:R24Eeg10bfqmT3tMj/fEGCD0ZWkAoTwr0k:R7EGmmTufEqq

Malware Config

Signatures

  • Removes its main activity from the application launcher 1 TTPs 1 IoCs
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs

Processes

  • com.alpras.manager
    1⤵
    • Removes its main activity from the application launcher
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    PID:4610

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.alpras.manager/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
    Filesize

    8B

    MD5

    cbd9a53450ec89e0690e4e5f00063c45

    SHA1

    7ee82bf2db149db4a7b1f2d3f590a700c4b1fdf1

    SHA256

    ed58a9ed2b383d9fb6f88e5492177be657f705ce5357afe2efc7571bbe3e7f90

    SHA512

    93b7bdd07f245015531f1a37dbfcf7d1ec4340a8957566f9d3535132d5aee52ff476a4b746fa3955ba16a352c0eee4ab7ca853070bc9ff14466b6c67a59147c6

  • /data/misc/profiles/cur/0/com.alpras.manager/primary.prof
    Filesize

    1KB

    MD5

    c295e48bf83190c2fc7d0bd1103cd66c

    SHA1

    01a15192453ad3717dc1cf791271464665cea381

    SHA256

    c83a908835f38c222e18f8ba587b153442bdec4fd5ec7a2de24cc8fe798d8702

    SHA512

    8676dcb5f85857190fb17a102f9977cd065794d33a618c4b10553c6bbae6adf3fdaf91b4c1eb83e160faacc0236dd0a83e10c99946666bcaf0cbb87af1b101d5