4c15bad3486dc4aa0553ad267812aff29b1a4951abcc6ec91ef7c1feed78e7b2

Analysis

max time kernel
179s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240603-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
submitted
09/06/2024, 23:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

VirusShare_645a60e6f4393e4b7e2ae16758dd3a11.apk
Size

476KB
MD5

645a60e6f4393e4b7e2ae16758dd3a11
SHA1

8f27ab0f023fa7a5b333d68a377d85c082740bb3
SHA256

4c15bad3486dc4aa0553ad267812aff29b1a4951abcc6ec91ef7c1feed78e7b2
SHA512

6ce269147600d905eb33214e24001bcc2804d99858dddd469b6fca3d32df768ba33f2f917afc4c558a6fd5d73c893b09d84b557b5a0acd25eb2548a1c96dff7b
SSDEEP

12288:kt6QL9GaogESC0rBVrLV5bJ2mdd7q6HPN:kt6QoTSHrnrnJ2mddbHPN

Score

6^/10

impact privilege_escalation

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.android.locker

Tries to add a device administrator. 2 TTPs 1 IoCs

privilege_escalation impact

Device Administrator Permissions

T1626.001

Account Access Removal

T1640

description	ioc	Process
Intent action	android.app.action.ADD_DEVICE_ADMIN	com.android.locker

com.android.locker
1⤵
- Acquires the wake lock
- Tries to add a device administrator.
PID:4251

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

T1626

Device Administrator Permissions

T1626.001

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact