41419a535e1492f32751e19db78bd1f71736b6d3e51fd93feeb65fad36497367 | Triage

Analysis

max time kernel
57s
max time network
67s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
31/05/2024, 19:09

Sharing

Report Analysis Logs

General

Target

TASKMANAGER.apk
Size

256KB
MD5

20d8603314a52b75dad2a577ef785063
SHA1

52a1c165f0346198f1c7af72a964b59df98b2672
SHA256

41419a535e1492f32751e19db78bd1f71736b6d3e51fd93feeb65fad36497367
SHA512

6b15cc190ac09620170afea44c5354472166b1483364b231745bd4d6b1a7f47782f74f69f65e2852d843ee9fcf5470c61cc1d6d3a64b1b9a740f24e585cc08b0
SSDEEP

6144:Gtr/W679Wl+MJR2mEvLWFmglzdiIvBSJI7HarCcgxsA:GH9W1AzglzNJ+I7a0xJ

Score

8^/10

collection credential_access evasion impact stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

pid	Process
5087	com.etechd.l3mon

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.etechd.l3mon

com.etechd.l3mon
1⤵
- Removes its main activity from the application launcher
- Obtains sensitive information copied to the device clipboard
PID:5087

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Suppress Application Icon

Credential Access

Clipboard Data

Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Replay Monitor

Loading Replay Monitor...

Downloads