e24ad9004cb46df8047944c468c8e67581e88e35bd3ec7f9e9748543f3cb8d29

Analysis

max time kernel
137s
max time network
178s
platform
android_x64
resource
android-x64-arm64-20240603-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
submitted
09/06/2024, 23:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
VirusShare_e09e167e47a753b7eb20583ac507b231.apk
Size 108KB
Sample240609-3twa3shc69
SHA256 e24ad9004cb46df8047944c468c8e67581e88e35bd3ec7f9e9748543f3cb8d29
MD5 e09e167e47a753b7eb20583ac507b231
SHA1 613a7f09a91564958ea5df67f4142b7160d63819
SHA512 980905682699dd3c67e5767b713e96136b52e5f6dcf0bb059e2ccda683c759188bb26650fbac0859c3b214be3283f7799328c7a83616eafa4c540637d80588ce
SSDEEP 1536:qNaG709qVQSIoJJgtXyRy/q+og7cJwPowvxjdiGI7lFtWbsHwdMEX/ysvG100lbo:UaGAg21ootiVTOd8Z7VWbsqPXmbo
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery evasion impact privilege_escalation stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
4576	com.install.l

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.install.l

Tries to add a device administrator. 2 TTPs 1 IoCs

privilege_escalation impact

Device Administrator Permissions

T1626.001

Account Access Removal

T1640

description	ioc	Process
Intent action	android.app.action.ADD_DEVICE_ADMIN	com.install.l

com.install.l
1⤵
- Removes its main activity from the application launcher
- Queries information about active data network
- Tries to add a device administrator.
PID:4576

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

T1626

Device Administrator Permissions

T1626.001

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Account Access Removal

T1640

Replay Monitor

Loading Replay Monitor...

Downloads

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 29B
SHA256 9e0b975d91b3e17827560d691f408cc73cbd77c2b678455578447c2bffea4903
MD5 a6e019f24cc72ca3168f82156c054f20
SHA1 f0704395844e3151111dc9d3e2304fdc29a4942a
SHA512 ea47db6aac704eb69267763c47f90a683345c45faadaaad7457c4f78367b0f32a3ce98a66fdcb3ab4d9b182c0fc070c9dcc0e738beab4573bf4847c5849db725
MD5 SHA1 SHA512

Submit Download

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 28B
SHA256 1e6bcf5cd7eb94a614c7a63119cd16645cabb237f9e1d4cb8f7465460f1f44e8
MD5 80b62a13b6628256fd53899405bcc58f
SHA1 2c454aed8364fef6e4e8871b28cd2f0e3c1f5ae6
SHA512 ea32c65b44fda47047edcff14646b0cc579ff499f0191b0473ef6d1757f1a3799999a63a117105db15b3cc154b2536126aa4ebcf50596504155e8da05c2ab5e3
MD5 SHA1 SHA512

Submit Download

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 27B
SHA256 dfb6b2dbc8e937e866593ab8137dc803e556088f0c856a9c62d35def359a44b6
MD5 07de6ef6c230019aa1c7992dc178e99a
SHA1 7fe36a41bd7cb8f0973f682b568e4e1e654f4537
SHA512 a75c558e28c1e0db32aeece74eed9619b5b3463be116b4043002e745dde4fac47bf62c9f3cc9297efd5f1be4ce0b08e65ab28df802ed9391c8a28947ee71c846
MD5 SHA1 SHA512

Submit Download

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 27B
SHA256 77e46d8dbbab86d5373e2ac656153be8c1368015a6a44ef1cc733d3407691ecf
MD5 1bfd27255dd6c0bb69fce72f930d2b41
SHA1 56933d5aedf3899c7ee6cf3ae4d828aca1e2c14d
SHA512 ce68871ae8182e3ff3acea2cb360bf210569626b2d3aac5c4d4611d8b18c4c853d5cd5372e6a4ce2a4d1eeb8be1a2f557469ee3bd7464bdfbc11edea2e7f802a
MD5 SHA1 SHA512

Submit Download

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 46B
SHA256 4cb92bf60dc8344a8400508e135a267654daa23583f34f773bac617e9deccddf
MD5 1e4fcaa0d345ae6b06790cf4be5b0e1f
SHA1 6cd0f0ab82bd010e759d5458421d5fddb1ef656a
SHA512 ae9994093b6fcfc99555c60de133d45d1cce0e098f4ada3c484899efa1ffd27b3268b6d60bd2a56de94b70b4bed7f87738959414b0e9ae758376d6296060eac9
MD5 SHA1 SHA512

Submit Download

lbt.txt

Path /storage/emulated/0/lbt.txt
Size 106B
SHA256 13088c270f8b0cc43f397fba507f407cfc31e889a759f1144077cb5515041b1e
MD5 6b073e05291f1508d72b28e080acf27b
SHA1 faf8ecafafd385243fa9abca4395ae385bc5f68e
SHA512 f2c608cd6340db3d54c451d22807597b6b048b39c28a42aa9e43f8ee50d16c7597987d6d75bfbb9380ee138d194ed19baaec6d76dec547f9b137db7f347ca9b1
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads