fb9fdbefbf65d348ea07bd9bb153b73b6280b55c4c0bda9be2d7f4e9f93b3b68

Analysis

max time kernel
9s
max time network
131s
platform
android_x64
resource
android-x64-20240603-en
resource tags

androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system
submitted
10/06/2024, 10:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
VirusShare_3f5d3ca59c093a432e81618b91bb3fcb.apk
Size 212KB
Sample240610-mc8bbagd37
SHA256 fb9fdbefbf65d348ea07bd9bb153b73b6280b55c4c0bda9be2d7f4e9f93b3b68
MD5 3f5d3ca59c093a432e81618b91bb3fcb
SHA1 9aa851f8c8e258f32f42453fc068f364a8b8a349
SHA512 bda46d0d0bfa134d55e35c25c01a7284a4a00f44ea5476ceb9f0fc2f73a15e17268475d1a027a22aa55fad8a5653e0d463969c3579da7f06abdf5dd944f03375
SSDEEP 3072:wu3Xd6c4Qmj7xv+UWbYFmN2yacC2l7n65X9SJhfAK+VpgzlmuUVbDsdW2MyiJ4rh:wud6MUWbYfcFle5cvfkpgz1UVDenPLXR
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery evasion persistence stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
4990	com.ass.player

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.ass.player:zprt

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.ass.player
1⤵
- Removes its main activity from the application launcher
PID:4990

com.ass.player:zprt
1⤵
- Makes use of the framework's foreground persistence service
PID:5029

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Foreground Persistence

T1541

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads