e24ad9004cb46df8047944c468c8e67581e88e35bd3ec7f9e9748543f3cb8d29

Analysis

max time kernel
142s
max time network
184s
platform
android_x64
resource
android-x64-20240603-en
resource tags

androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system
submitted
08/06/2024, 21:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
VirusShare_e09e167e47a753b7eb20583ac507b231.apk
Size 108KB
Sample240608-1kvbbagg5y
SHA256 e24ad9004cb46df8047944c468c8e67581e88e35bd3ec7f9e9748543f3cb8d29
MD5 e09e167e47a753b7eb20583ac507b231
SHA1 613a7f09a91564958ea5df67f4142b7160d63819
SHA512 980905682699dd3c67e5767b713e96136b52e5f6dcf0bb059e2ccda683c759188bb26650fbac0859c3b214be3283f7799328c7a83616eafa4c540637d80588ce
SSDEEP 1536:qNaG709qVQSIoJJgtXyRy/q+og7cJwPowvxjdiGI7lFtWbsHwdMEX/ysvG100lbo:UaGAg21ootiVTOd8Z7VWbsqPXmbo
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
5200	com.install.l

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.install.l

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.install.l
1⤵
- Removes its main activity from the application launcher
- Queries information about active data network
PID:5200

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 29B
SHA256 f01237b90effd6fa392477fd4bb04715ee6f94d33e3f8a57374457a588f71a96
MD5 54edf00e6fe540f44bb0d1baab655a75
SHA1 6ffc204e5d10ea6117a770b18f1a8d39c3f73704
SHA512 17a6fa36632739cdacb7a544767a485dd5eb85b7e0666200b3c92176083ca6d12a3edf6a841c0a766089fcea5c13cd34e54c820d4d0f471906d6b7ecf2c049b2
MD5 SHA1 SHA512

Submit Download

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 28B
SHA256 6256cfac0153c481c71431149ded37a153415201fa35f936ff8e62af9461f91e
MD5 bb979d74ae9d556e134c076be430dd55
SHA1 7a819c9c8daf3fc5748699abfbdf47e2926a5688
SHA512 b8a1d1e07c5c5028f7494b43e1f6f5dca56415c7230d98be4fa47bd0ad1d4f62cfc5f979852da1a277d204b58c2e10bdb49bfa56038d6db930f53a723fb0fb85
MD5 SHA1 SHA512

Submit Download

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 27B
SHA256 e5ea1aff22185377626398cf9bd0a95f86c541bc42665897542f3e4b9e87eadb
MD5 8f979e2dac097a2e0794f40c9aff8d43
SHA1 0ec20b17953d03368f650d01dbbd3af7e153280c
SHA512 2bfa73705f504414506d3b54520a740c036f4fb9e3562ae513908127b1782870e31f7cfdaffd2ef1cbcc54cd81b86bf605751fff55328a914f6a44555af69a09
MD5 SHA1 SHA512

Submit Download

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 46B
SHA256 5c99a0222d2c547c241f3ae61185f0d4b6379455bbcf94b0f3fad2dfe2e2d199
MD5 03dce64eda80fc53dd0fe0ba20f05fca
SHA1 3edc789ca6f0695ff7965dedab2ab5de1a1f8bcb
SHA512 511d143528df7350e11cabcd41289f4989f74f7d41ed898e394d4a7f2c552bec16daf8118f9e59072bd3faf8e7fc56d9fcbb24529c55ea3e4224fcd2ad7944d7
MD5 SHA1 SHA512

Submit Download

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 27B
SHA256 5cab0912aa050eb491462eadd8b65a17c3f49c72b3d028550ff5b5c71b23986c
MD5 5efe7f9e5e0738b99739093360861cdb
SHA1 af0e221f4a634cada6283d44908876caa5e2eb76
SHA512 a6aaf7e54283a83b31dd9803cc978b0f33d30c4770874558ee8a831d27f8c3df5f8c8e3352fd64520378a2b7b19d87cee563b688fcff1970eb58d9d7493f8216
MD5 SHA1 SHA512

Submit Download

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 106B
SHA256 eb23232c1d94fffd0b377a18b5240e600680c16a3e97fd2f44acecad6a5cf2ce
MD5 72cf55dc26976fcde9c5c9258f9ea33c
SHA1 8170a3d023ad7155dace4dc2afbd07bdeef47d1f
SHA512 15cbcedc25fa6fbf0869090318c3660d69159ca0e3e60e1f7d9f18c21411217dee6fc31450397c5365b38e05e355b53a54e11892a544f299afc18d67979e00c2
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads