Analysis

  • max time kernel
    22s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    23-05-2024 10:56

General

  • Target

    Mobile Tracker.apk

  • Size

    3.8MB

  • MD5

    bd8531e9686b57161b1189ce1f6f282d

  • SHA1

    9579d0e4209274e1bbf05a9ff97da5533846251d

  • SHA256

    2de500618c8ba340dbbe615cef8df65d9864e8b6bee7fa78c16421a38b1bd185

  • SHA512

    a230213a9cbbd00faadeb6b096373789799d4900dc3e86afe71d5b805e973393d5e01569a1ac1115aa111f92cc6096884f128814d5c1b9642249900c5fdc887a

  • SSDEEP

    98304:Ag7V7JP2/CaLugPrnwW4UIBXQne22FdfoTYrqeKw/iIZ:AgjPiCpNWvM3LKw/iK

Score
7/10

Malware Config

Signatures

  • Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

    Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

  • Requests allowing to install additional applications from unknown sources. 1 TTPs 1 IoCs

Processes

  • com.mtf.download
    1⤵
    • Checks the application is allowed to request package installs through the package installer
    • Requests allowing to install additional applications from unknown sources.
    PID:4523

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.mtf.download/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
    Filesize

    8B

    MD5

    b353f751e817c51f3c9bd918dd04a7bb

    SHA1

    31e39f1a8c7d2707f48ca55149fcfae81bedb87a

    SHA256

    c3ae105c3c858e54f210febd305c6730604f7446b0d3917c7c35bbc58629a6da

    SHA512

    6429fc9f214a6bc350fcbe884c9ec4f354d87aa084bdbc55a3f1eb5997b5fa9d9ce990219f65ab594d2d597989e361189377fc33c5d27e2e1cdf127966cae5f0

  • /data/misc/profiles/cur/0/com.mtf.download/primary.prof
    Filesize

    1KB

    MD5

    87666e92abaa2a7de3303e72681694d8

    SHA1

    a51e5d2e67cf9ccd9886e9274e5c72b65c3d4f44

    SHA256

    98c190360b2530de4b3c39027f6e085ab3f8f91a085df2a2185953fb92b9ad70

    SHA512

    ef2555c37931b4bd91c58796c15d6880d093a52489c88928b6ca83d4cfddf0c6b97a56de18adfe57abad0d28a7e440b839806f9f15735866c88858951468d646