e4d57c9f9a4aea45728fcf217e35a9759ad08b65f50fc429d864f4c92b68e9f6

Analysis

max time kernel
14s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240611.1-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
submitted
12-06-2024 17:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

e4d57c9f9a4aea45728fcf217e35a9759ad08b65f50fc429d864f4c92b68e9f6.apk
Size

989KB
MD5

cdf656af86e411b7be022537fcf81f4e
SHA1

fda8a5fd637b758df554025dd1df581e038b799c
SHA256

e4d57c9f9a4aea45728fcf217e35a9759ad08b65f50fc429d864f4c92b68e9f6
SHA512

40207087a77045b3103491fce1db65a01b8587e647515a957466f922c064a4b782102ae4b128f7a2a1f8f6ae5db0b1b323dbb012d2f684849ecce649db40a78f
SSDEEP

12288:0aB9Zv+Ix/nl5Ort3qWL+hkJLHfI6kg4Zv3H8mwuAkASwLp3dSJ7xlKgA4qDk7+:TvVx0UmJLHfIp5b7YzSB/Kg/b7+

Score

8^/10

evasion impact stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
4462	com.kimabolacenimi.hiwi

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.kimabolacenimi.hiwi

com.kimabolacenimi.hiwi
1⤵
- Removes its main activity from the application launcher
- Uses Crypto APIs (Might try to encrypt user data)
PID:4462

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads