e24ad9004cb46df8047944c468c8e67581e88e35bd3ec7f9e9748543f3cb8d29

Analysis

max time kernel
133s
max time network
171s
platform
android_x86
resource
android-x86-arm-20240603-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
submitted
08-06-2024 17:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

VirusShare_e09e167e47a753b7eb20583ac507b231.apk
Size

108KB
MD5

e09e167e47a753b7eb20583ac507b231
SHA1

613a7f09a91564958ea5df67f4142b7160d63819
SHA256

e24ad9004cb46df8047944c468c8e67581e88e35bd3ec7f9e9748543f3cb8d29
SHA512

980905682699dd3c67e5767b713e96136b52e5f6dcf0bb059e2ccda683c759188bb26650fbac0859c3b214be3283f7799328c7a83616eafa4c540637d80588ce
SSDEEP

1536:qNaG709qVQSIoJJgtXyRy/q+og7cJwPowvxjdiGI7lFtWbsHwdMEX/ysvG100lbo:UaGAg21ootiVTOd8Z7VWbsqPXmbo

Score

8^/10

discovery evasion impact privilege_escalation stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs
stealth trojan evasion

T1628.001

Processes:

com.install.l

pid process

4159 com.install.l
Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

T1422
Queries information about active data network 1 TTPs 1 IoCs
discovery

T1421

Processes:

com.install.l

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.install.l
Reads information about phone network operator. 1 TTPs
discovery

T1422
Tries to add a device administrator. 2 TTPs 1 IoCs
privilege_escalation impact

T1626.001

T1640

Processes:

com.install.l

description ioc process

Intent action android.app.action.ADD_DEVICE_ADMIN com.install.l

pid	process
4159	com.install.l

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.install.l

description	ioc	process
Intent action	android.app.action.ADD_DEVICE_ADMIN	com.install.l

com.install.l
1⤵
- Removes its main activity from the application launcher
- Queries information about active data network
- Tries to add a device administrator.
PID:4159

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/lbt.txt
Filesize
29B

MD5
08334557de60428134e3a581b577cd8c

SHA1
1d84ee43f97b39b93da6f48040e96444fbc0e975

SHA256
a0b0314e7bf941e302fd1fafb4aad875fc1646cb44bf5beb3fb2c467f8879ef2

SHA512
1b6472ad5f878d4ca5a6c77381f749031b15acadfb477128f55f22bec9ba8574759b861d70d1084d973fa56fbd796f84a56d3c72e58bf06c13a08cf2e22f5804

Download Submit
/storage/emulated/0/lbt.txt
Filesize
28B

MD5
e966df3575a3aa06b2c3399cf2b244ff

SHA1
a19ea1f8556c44f9945faeff3f7887ca2f613a0e

SHA256
b4390e2a0d0eb22b9df6f26bd7a59985e2961ab17d9fb063024112282854dcda

SHA512
7c1993d81417b57af2c4f033f107138604e305ff2c40d9a3bd3dc4058df23ef513ba2c52d68c2444ae5c747f8e945c9b13e4ce8add1733c1ae7f3411164b82cc

Download Submit
/storage/emulated/0/lbt.txt
Filesize
27B

MD5
0b9ec47fa09a02783e4421bd5db2f715

SHA1
84195feb2d665ff820ca60de041d0d3eff8bad48

SHA256
0fc3586672e6031e1ae7a8f50b97647c407e59ce0ad2e793a3d264217b0e1739

SHA512
9e1ec90322760e31dfaeff653f1088059a320c8fe0a9c531c76a62c8ce051d0613b7bda55a73a0667ccdfefa2cca8ad8470f95bd1801690a1f7889a3a36d872b

Download Submit
/storage/emulated/0/lbt.txt
Filesize
46B

MD5
22e54f2dd356ea1030944ae3fbc7cd03

SHA1
ca8b5878ba422fe895ee0a00c8ad3d162fadda81

SHA256
56848e99960f4e097db9f0e4123a7749b32e81d797f6d8c3f3679fa791864466

SHA512
4a676a3ae4a2ac83187abc22c1edc617c0da8aef98fd3a6680453af6efe4becd5799465001ec0d1da78804869b42bbea191fb64731706fa15cf40d2ab516d290

Download Submit
/storage/emulated/0/lbt.txt
Filesize
27B

MD5
6498bf5889ff6f79ae43fa01cc92b468

SHA1
5ca5a6d0718175cd82c85edcc37740a900a043d2

SHA256
4811fb52cec00cd2cf55bf6660117de6abbeabfe623121d18b6358c1de15bbf0

SHA512
d023f4b3d4d133b8eb19e8f17be8b9966b8d1b1d0e2962090cb76347db71e032c4bfae08a82a29c8e2a32b944257fe072e6450652e3f85a9591f2545f1ef3a4b

Download Submit
/storage/emulated/0/lbt.txt
Filesize
106B

MD5
2fea15495262df764fae3a563d069362

SHA1
af85845342b30b24ca859007a36d2eecb86255b0

SHA256
11f855d61e4e086a0bf61833776b44d2c0cc7d4ec221ecb5b185c915e990d34e

SHA512
4729304f51796a5c0a9659f8bf877f072cd1f1f852be8879cfc62dc344aad60cf0104ff6f9b063a7f1f48679c406da3dce0e0d18739b8de8906e2effdc2369f3

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads