e24ad9004cb46df8047944c468c8e67581e88e35bd3ec7f9e9748543f3cb8d29

Analysis

max time kernel
138s
max time network
180s
platform
android_x64
resource
android-x64-arm64-20240603-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
submitted
08/06/2024, 21:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
VirusShare_e09e167e47a753b7eb20583ac507b231.apk
Size 108KB
Sample240608-1kvbbagg5y
SHA256 e24ad9004cb46df8047944c468c8e67581e88e35bd3ec7f9e9748543f3cb8d29
MD5 e09e167e47a753b7eb20583ac507b231
SHA1 613a7f09a91564958ea5df67f4142b7160d63819
SHA512 980905682699dd3c67e5767b713e96136b52e5f6dcf0bb059e2ccda683c759188bb26650fbac0859c3b214be3283f7799328c7a83616eafa4c540637d80588ce
SSDEEP 1536:qNaG709qVQSIoJJgtXyRy/q+og7cJwPowvxjdiGI7lFtWbsHwdMEX/ysvG100lbo:UaGAg21ootiVTOd8Z7VWbsqPXmbo
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery evasion impact privilege_escalation stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
4709	com.install.l

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.install.l

Tries to add a device administrator. 2 TTPs 1 IoCs

privilege_escalation impact

Device Administrator Permissions

T1626.001

Account Access Removal

T1640

description	ioc	Process
Intent action	android.app.action.ADD_DEVICE_ADMIN	com.install.l

com.install.l
1⤵
- Removes its main activity from the application launcher
- Queries information about active data network
- Tries to add a device administrator.
PID:4709

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

T1626

Device Administrator Permissions

T1626.001

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Account Access Removal

T1640

Replay Monitor

Loading Replay Monitor...

Downloads

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 29B
SHA256 73b0dee79b743b7be3acaaf08cd3fb498505befb1fdf70cb64d5016eae496c9e
MD5 44b5180cc303d8218ac3c550b15bf078
SHA1 ee2d3f644d4faefde215bc82c72350c5c86b9d69
SHA512 eb1d74b5a16b694768142576d3f2549d6450c4f48225f3e309dcd1e230f5b3eb5012bf0d338b8cdbc5fa2f7fa014a66438f21b54082a69f1e34a9393a9cf6f65
MD5 SHA1 SHA512

Submit Download

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 28B
SHA256 9bafa5c142f03c97c564f0314832318a3985de42b5d0a30f2af01b4e90ed1ce5
MD5 a8ae2cb2fedef77e1047c16d7a00dcce
SHA1 20e3eb35bcc3bc662fcc736cbf842cbf84b4acdd
SHA512 0abf44a2e4dd8634522569b81ec91748a296e3630e38a4b11a2038707f9cbc64184182b108979138394673b153108d2765c3e6cbbebf3338e761147802152e67
MD5 SHA1 SHA512

Submit Download

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 27B
SHA256 bffcdec3552ea31749ebd8c4f6492cddd739a55cd2c26d3a105f7dbcdd9a793c
MD5 7275c9cd7b5d1cd6b14770f999215769
SHA1 f10817362df96b27777330f7534ea57ccb98167d
SHA512 dcb9f8f5a3b46e11bcc2c7d3b8d84751a0542e71abe122db65a42ce5de7f67ff20e12c9ebefa315ff4ac1ea219e465003c403ba4cfc2ed636e37e82349c97107
MD5 SHA1 SHA512

Submit Download

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 46B
SHA256 c373dc780f3541f72f771e7c68345201d894ccdc4c0a89e010a00fe46ac254cd
MD5 76b35749d65d14e46385dc67266e23b5
SHA1 9f743fbd5f7e951547223fb1971f451f186f7f76
SHA512 d4c34d79176c05b3f2879ce11a4597ae2fbf81c8498f635bb29e5e72e4c8ab9771f3409fc1193895bcafe9e9324c668dfac4d957234d95208f25fc1318f1033c
MD5 SHA1 SHA512

Submit Download

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 27B
SHA256 4d333684a44408fb6b6f8c218a383d1610684d996803f2983cc11994d7cb8c85
MD5 e79a8eb1e41a8b936357225f0f49944b
SHA1 6b062cafed8b7cfdae259fca0dfcc2a98a7bf3ae
SHA512 9a4a5eb89c42e66f0ca3566732fbe4481e4fded8cba8ef1aa39448c421b81863ffec475bd268edb05fb598745d5b24ce06f09c28309957ad45034fc1a4cd4b13
MD5 SHA1 SHA512

Submit Download

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 106B
SHA256 88205fc1396eac15f521c71e5c7871a21627ab6495f52830e84c192ea7548bad
MD5 e5805ed650f7e793048a5bb84e76fbc6
SHA1 292b6246c60b5af9de80dacfad243d6611a994b7
SHA512 40a3960077602cfad133de025c6463708d30b84beca93d44025b064384709dc596394b6622dd40678e26cebaa05bd300bb7b89a5e2425fc7ab436e9862abe02a
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads