Analysis

  • max time kernel
    3s
  • max time network
    168s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    22-05-2024 20:53

General

  • Target

    Victim_1.0.apk

  • Size

    6.4MB

  • MD5

    99d7ca57067e2e849d46a2f45d954ed8

  • SHA1

    40d9cb4b63d4d158f9552a86bd4ea73734e2c9ea

  • SHA256

    abfbe0a094d8601da53cc5a1f6605bea08274790a43324f891a980a0d78981f0

  • SHA512

    e42dd6fc6188815a0448eb7142cc8364eb6bfafa5e5138a09ac4457a817594c0b40c7d34068a9f4d25fc6132db15c863bccf625e0b5b6317f14112697ef8e226

  • SSDEEP

    98304:TKgMZWQrzM1tGP+Srhgi11l+94hXo7iHtc0BxO7du4n+ddn6bKhaTlU7o7Bk8UoB:GxM109R14yeiNjxvn/eU87doU

Malware Config

Signatures

  • Requests accessing notifications (often used to intercept notifications before users become aware). 1 TTPs 1 IoCs
  • Queries account information for other applications stored on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect account information stored on the device.

  • Reads the contacts stored on the device. 1 TTPs 1 IoCs
  • Reads the content of the SMS messages. 1 TTPs 1 IoCs
  • Reads the content of the call log. 1 TTPs 1 IoCs

Processes

  • com.my.victim
    1⤵
    • Requests accessing notifications (often used to intercept notifications before users become aware).
    • Queries account information for other applications stored on the device
    • Reads the contacts stored on the device.
    • Reads the content of the SMS messages.
    • Reads the content of the call log.
    PID:4524

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads