Analysis
-
max time kernel
14s -
max time network
187s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
-
submitted
01-06-2024 00:40
General
-
Target
bf7aeedd068639437b11c98ac589862ed4a6313ac6f90f803b1b36d711d634f6.apk
-
Size
145KB
-
MD5
99ac993b7856e6ae23758d17e832dffc
-
SHA1
8607ca497054bcce6c230230a674c5d5d5b77567
-
SHA256
bf7aeedd068639437b11c98ac589862ed4a6313ac6f90f803b1b36d711d634f6
-
SHA512
cb958e0fa84156a038be1301255781b3ad429a637d0c7f785a75d7d5465cee162708ad046973f2b48c8345b3f851c63bafaa61b72d294f02416b2fc89a9962cd
-
SSDEEP
3072:g0743ES3Eb3EnZuqclOv/HAg0aS1XJl3EIu:xNlOngbaSLZu
Score
8/10
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Reads the contacts stored on the device. 1 TTPs 1 IoCs
-
Tries to add a device administrator. 2 TTPs 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes
-
com.Zrgmkpdq.Rlofgsau1⤵
- Reads the contacts stored on the device.
- Tries to add a device administrator.
- Checks if the internet connection is available
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.Zrgmkpdq.Rlofgsau/app_config/configFilesize
42B
MD5b6b10e371be9b3060975f14ea1cf65e3
SHA1b80ce0a9d8c6101b29207beaa171af2da78f45d9
SHA256af5c9548cad8f96aa82be465e528e491f92cab572b33387af2841608d4c63739
SHA512e0293a61218e776204c1b388c62e6ad4096e427a030284deec571cc7468f6681155b7a10d2798891d861d983356cde55f8d5cb964abe994cb877520bd10bb2a2