e24ad9004cb46df8047944c468c8e67581e88e35bd3ec7f9e9748543f3cb8d29

Analysis

max time kernel
137s
max time network
178s
platform
android_x64
resource
android-x64-arm64-20240603-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
submitted
08-06-2024 17:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

VirusShare_e09e167e47a753b7eb20583ac507b231.apk
Size

108KB
MD5

e09e167e47a753b7eb20583ac507b231
SHA1

613a7f09a91564958ea5df67f4142b7160d63819
SHA256

e24ad9004cb46df8047944c468c8e67581e88e35bd3ec7f9e9748543f3cb8d29
SHA512

980905682699dd3c67e5767b713e96136b52e5f6dcf0bb059e2ccda683c759188bb26650fbac0859c3b214be3283f7799328c7a83616eafa4c540637d80588ce
SSDEEP

1536:qNaG709qVQSIoJJgtXyRy/q+og7cJwPowvxjdiGI7lFtWbsHwdMEX/ysvG100lbo:UaGAg21ootiVTOd8Z7VWbsqPXmbo

Score

8^/10

discovery evasion impact privilege_escalation stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs
stealth trojan evasion

T1628.001

Processes:

com.install.l

pid process

4570 com.install.l
Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

T1422
Queries information about active data network 1 TTPs 1 IoCs
discovery

T1421

Processes:

com.install.l

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.install.l
Tries to add a device administrator. 2 TTPs 1 IoCs
privilege_escalation impact

T1626.001

T1640

Processes:

com.install.l

description ioc process

Intent action android.app.action.ADD_DEVICE_ADMIN com.install.l

pid	process
4570	com.install.l

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.install.l

description	ioc	process
Intent action	android.app.action.ADD_DEVICE_ADMIN	com.install.l

com.install.l
1⤵
- Removes its main activity from the application launcher
- Queries information about active data network
- Tries to add a device administrator.
PID:4570

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/lbt.txt
Filesize
29B

MD5
ef03f8f234dd0b3249c6d870a6c7aaad

SHA1
56661a14cd30db8ccce88c8ac6a5d19d66b16277

SHA256
ea3caf2750b92187dd18a627d619b55f32a218eac08854c835cd73a7a2a8b7df

SHA512
5713e839defce55753c45ed0b070265b73886633c68f42735141a4d7cb8944f06cfd9005f2adbd92c0184f70a658779f256cd87e790a4f38460acbf2f35c40e3

Download Submit
/storage/emulated/0/lbt.txt
Filesize
28B

MD5
2158fa7dd0add76533e5aaa39d2f274d

SHA1
592ff7f8d955633ddab33d32fee79425785ac8a4

SHA256
5dbb1973ebb202d4b7d29c3eadc941c1a7027af92373e48926bac6bff56402b4

SHA512
fe4b565ee356d6eda8207f630f9f8e4b9f8fb4088e07e216e684daa787d4168118ccfa92b1b0cd6117daead87cecda0de7248274a23165de1db5d71cea081d11

Download Submit
/storage/emulated/0/lbt.txt
Filesize
27B

MD5
fc21a217f29e6c0ad8c651c1625fd104

SHA1
3e59c608b4599d33f24318d1b064b06041cafb8b

SHA256
e59405f41691787d84c86cf64672917ab7300011194ba774aaef187f9879c18d

SHA512
bb7a8325348ebad4cd90f3ce39d99e56325695311a07581d66357d0e235c4d8f57917c2cefc6e1c247620c2547524dce069e5861018650b24f4ca025ce90d09d

Download Submit
/storage/emulated/0/lbt.txt
Filesize
46B

MD5
1749f26f2a92ec8e74df5dad2db85d2c

SHA1
0c651903735113ba0a8d34401717cf03f78ebf7b

SHA256
6c331b5ffb457026bbe5f308ed2b7529bd88b590605f15c4c8c75839379ef1da

SHA512
0eb96954648e4cf2d38b8e134ba00a8c0c71fdf883c5ea739aa9f0172b14c1c828be6de05156ce9ed7966205fc279ef567be664a0accd1fc28e590bb58bfce2c

Download Submit
/storage/emulated/0/lbt.txt
Filesize
27B

MD5
7621f0653645a66c1cf6a32b7f84e6b7

SHA1
973370ffb05f0ff9c914582639808d3f9107e3f3

SHA256
e29cadb29f2d2edede7721e6dc21abdfdf54427a2223939dce854c615033f9a1

SHA512
dfb8b021af8053511887b7daa4ca85e2f02e6f5bc8eb1564aabbd8c2f1b989444defb2d0e4be685c9bea8bf7afd11cee2035d73f870fc2b5ba4be396ecf19856

Download Submit
/storage/emulated/0/lbt.txt
Filesize
106B

MD5
6cb2603bc247d50bae38bcb5e02b34a8

SHA1
53f31b7025a090ff0c82a1a52961c84db4e71d84

SHA256
72b92da45284f4153e3e515e1d81d5be9fee91294c3aa9347e7905b0aab4d49a

SHA512
b97fd681eddc68eae5f0b3e6d78c6de31ca91493c81093d06cc1b2670c8ac93f2c49b5c4a65842d81008e2aa7fa67995e2a9caa8f91aa4ca14292748a565a091

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads