c7af361711e337d7743cec3d91e49288ad5dd6d77664c1a820113db1ea89b01b

Analysis

max time kernel
8s
max time network
147s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
12/06/2024, 16:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
c7af361711e337d7743cec3d91e49288ad5dd6d77664c1a820113db1ea89b01b.apk
Size 744KB
Sample240612-txvpaa1fqa
SHA256 c7af361711e337d7743cec3d91e49288ad5dd6d77664c1a820113db1ea89b01b
MD5 e7b9628a32b4f37f136ad77c5347e682
SHA1 cd789001a2d38d16a126660b80526d8d904a135b
SHA512 a1a2b1199dc9fd3fd5e0d5df83bf897b387d49be09977c8dc34816a72ad0c7122fab334c2c86e61bc813d58c941c65737a743db72b3a06407a190b90f2779559
SSDEEP 12288:zWamamlJCpDv6OhiGlhjEjdUp9ohTUtpgl7Q5lViKxVEh:zWamaEJCd6OhiK1EjvTepsUbVhwh
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

banker discovery evasion

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

evasion

Code Signing Policy Modification

T1632.001

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.canRequestPackageInstalls	com.ku.installer

com.ku.installer
1⤵
- Checks the application is allowed to request package installs through the package installer
PID:5163

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1632

Code Signing Policy Modification

T1632.001

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/com.ku.installer/files/profileInstalled
Size 24B
SHA256 2c0fb87d5694bf64d12577f5b2b45f7d01f2d4ca907bf9e269824c893a087f8b
MD5 c5aa5f9a09b1e4c359bcd0e7226fc8d9
SHA1 762e440ebe11743cbd022407eaea60cce153a4d4
SHA512 9ccc5d0083405b2f01cdcc0089f7c3e2bcf49b22c3924c1e47b4389c9c78a9d8e964757dd448ed0b5740e66f6c2db630a4135fdc0bfc105f0a293a106a3fe205
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.ku.installer/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 e63d7d419b9bf19b4434800d9679305c7807ecb095c18c9d62ed8ac7b90372fb
MD5 3fb9122a281c766e4a16c86016db6a0c
SHA1 e2ce48ce3389a47f86788373e814c26f767d4e50
SHA512 d335dee513c9e0ad84552578fb9bfec515f193c541d42f7b1f6e7e6664d9096de4b918fcfca74ed2f424b30282791641a50b249576b3eb505553b26f9740fdd3
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.ku.installer/primary.prof
Size 471B
SHA256 8ff0c039db87d859e1d77bd940174ea8d273e0ee80381e0309690e796232279a
MD5 7164d2489e58288a138a54b90c2fd796
SHA1 83649263032a2f4c2111a92b5f1564060ebb973a
SHA512 c9cca8564e1e73d710e466ac3b74d1969bc49a994ffd17a9ac18cbf1c404306cac7314031a5f02d9e1c86c09f6b18a956b144d33dce54d8e3f5661c491589c5a
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads