e24ad9004cb46df8047944c468c8e67581e88e35bd3ec7f9e9748543f3cb8d29

Analysis

max time kernel
141s
max time network
183s
platform
android_x64
resource
android-x64-20240603-en
resource tags

androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system
submitted
09/06/2024, 23:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
VirusShare_e09e167e47a753b7eb20583ac507b231.apk
Size 108KB
Sample240609-3twa3shc69
SHA256 e24ad9004cb46df8047944c468c8e67581e88e35bd3ec7f9e9748543f3cb8d29
MD5 e09e167e47a753b7eb20583ac507b231
SHA1 613a7f09a91564958ea5df67f4142b7160d63819
SHA512 980905682699dd3c67e5767b713e96136b52e5f6dcf0bb059e2ccda683c759188bb26650fbac0859c3b214be3283f7799328c7a83616eafa4c540637d80588ce
SSDEEP 1536:qNaG709qVQSIoJJgtXyRy/q+og7cJwPowvxjdiGI7lFtWbsHwdMEX/ysvG100lbo:UaGAg21ootiVTOd8Z7VWbsqPXmbo
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
5191	com.install.l

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.install.l

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.install.l
1⤵
- Removes its main activity from the application launcher
- Queries information about active data network
PID:5191

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 29B
SHA256 d787db9755a9b2d42f456daca6944f574c221dd908286f9f9d07bdcc7772d4e8
MD5 d7425d2bc8e3fc555cae203a9efb1a16
SHA1 c8ff7b85c9c294b16761771f45f196d1dae1cc47
SHA512 6d95d0e8564d3007f6a60025175f6cedf266ec1deb022afbd4c31716426f65caa1e8968fecf712089be8c6e994f1ad85ea4a88f5dde4c660544a4efa4944b3f2
MD5 SHA1 SHA512

Submit Download

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 28B
SHA256 ea1ed04dbd4af18cb58ec76ee6ff8a514bd65b5c679701fa42e579aeb6f37b8c
MD5 1635b7c71ceb6182ff3b41f5a84c44b2
SHA1 23e63b2e2848d2e9fadc1d873953b9a2aea7d03b
SHA512 8a0ed281e495e4db8c54cd87f297f0f605c72e164b59833b18cd5ecf3867f751e70fc03b9bcdfbd606770c34efd61b1d4f8de9c656e7c958d1cedbf22647534d
MD5 SHA1 SHA512

Submit Download

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 27B
SHA256 5796f9a6b861fc54eda8934143398b8230581f4027e7907dfb4731d384908e00
MD5 140fb4e811b6b6cf002d00565f90f6c0
SHA1 b1f21c26325851287606de4235c0d65830e0d40e
SHA512 42dd609519d1f65a46f917718c4c676bb3f26dd257d70317af62fb8f0a066c65827722acf43a0dd8c38c7ad537cfb103e65dc3d5b2d5ad25c9cfb156a8011972
MD5 SHA1 SHA512

Submit Download

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 46B
SHA256 4cb92bf60dc8344a8400508e135a267654daa23583f34f773bac617e9deccddf
MD5 1e4fcaa0d345ae6b06790cf4be5b0e1f
SHA1 6cd0f0ab82bd010e759d5458421d5fddb1ef656a
SHA512 ae9994093b6fcfc99555c60de133d45d1cce0e098f4ada3c484899efa1ffd27b3268b6d60bd2a56de94b70b4bed7f87738959414b0e9ae758376d6296060eac9
MD5 SHA1 SHA512

Submit Download

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 27B
SHA256 77e46d8dbbab86d5373e2ac656153be8c1368015a6a44ef1cc733d3407691ecf
MD5 1bfd27255dd6c0bb69fce72f930d2b41
SHA1 56933d5aedf3899c7ee6cf3ae4d828aca1e2c14d
SHA512 ce68871ae8182e3ff3acea2cb360bf210569626b2d3aac5c4d4611d8b18c4c853d5cd5372e6a4ce2a4d1eeb8be1a2f557469ee3bd7464bdfbc11edea2e7f802a
MD5 SHA1 SHA512

Submit Download

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 106B
SHA256 d4fef4586aa924b8ff54f88d8c1b909abd6288ad4cde3d5ab65dfd9412bc82a4
MD5 d2e9e0ac443f54409f616bc3bb45bfa1
SHA1 3d7132330ea5e3717d24dd33b102b73a42f5d6af
SHA512 cbe6882583d3ef0ceadfca8605de6dd35050e4042b9e5056e00ba04757211597fc066ac3590988bcbe12b0a4eabfc7667394c120ec46a5eafa7ac69bb960c7ce
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads