4c15bad3486dc4aa0553ad267812aff29b1a4951abcc6ec91ef7c1feed78e7b2

Analysis

max time kernel
179s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240603-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
submitted
09/06/2024, 23:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
VirusShare_645a60e6f4393e4b7e2ae16758dd3a11.apk
Size 476KB
Sample240609-3s228shc49
SHA256 4c15bad3486dc4aa0553ad267812aff29b1a4951abcc6ec91ef7c1feed78e7b2
MD5 645a60e6f4393e4b7e2ae16758dd3a11
SHA1 8f27ab0f023fa7a5b333d68a377d85c082740bb3
SHA512 6ce269147600d905eb33214e24001bcc2804d99858dddd469b6fca3d32df768ba33f2f917afc4c558a6fd5d73c893b09d84b557b5a0acd25eb2548a1c96dff7b
SSDEEP 12288:kt6QL9GaogESC0rBVrLV5bJ2mdd7q6HPN:kt6QoTSHrnrnJ2mddbHPN
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

impact privilege_escalation

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.android.locker

Tries to add a device administrator. 2 TTPs 1 IoCs

privilege_escalation impact

Device Administrator Permissions

T1626.001

Account Access Removal

T1640

description	ioc	Process
Intent action	android.app.action.ADD_DEVICE_ADMIN	com.android.locker

com.android.locker
1⤵
- Acquires the wake lock
- Tries to add a device administrator.
PID:4251

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

T1626

Device Administrator Permissions

T1626.001

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Account Access Removal

T1640

Replay Monitor

Loading Replay Monitor...

Downloads

droidflag.syst

Path /storage/emulated/0/droidflag.syst
Size 8B
SHA256 d0b54a6b712cc633e4f9ca3ede91807eb23eaef271e165e4c245c4bf83c3385d
MD5 511ae0b1c13f95e5f08f1a0dd3da3d93
SHA1 b03881fcd505a6f2987289ae37488d514697466a
SHA512 0852db5c1ed8ee1c725ee4f0c486bb61ef1c3765ed650469bbb3cc44c4af72a2f8d5b463b34a1984234c165814a5344ac600a775f07459c4d17c74518a18b181
MD5 SHA1 SHA512

Submit Download