Analysis

  • max time kernel
    8s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    10-07-2024 02:23

General

  • Target

    833e332dc7a23004cf9da9714c7d4522571617c174f654957c173ebcc74ede67.apk

  • Size

    3.9MB

  • MD5

    46f65e8d735ec88344f0e3fd64d0ecc1

  • SHA1

    7f928d391000f0c0f32af4abbdd571ecdd7d0025

  • SHA256

    833e332dc7a23004cf9da9714c7d4522571617c174f654957c173ebcc74ede67

  • SHA512

    acea2a07a838bbe2aabb4445336773d12d972269a04c8df9d7867a54024e7010e390dc34538a539a89dcfd4cb6ade1464798f9593f7bd1ae4c4a3c9334ce50ba

  • SSDEEP

    98304:0ojAXbAmWbmsrT6Sr7Cs3wWXkYQYatKFdtho/KrQZB/y:7MbgTHr7DwWN+0tYB6

Score
6/10

Malware Config

Signatures

  • Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

    Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

Processes

  • com.mtf.download
    1⤵
    • Checks the application is allowed to request package installs through the package installer
    PID:4627

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.mtf.download/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

    Filesize

    8B

    MD5

    84713ff740136dba4e05c28458f751b5

    SHA1

    856a26aa29937a52c28893cc204068bfaf38d9dc

    SHA256

    dfb3664dcfa7496145f273df8adbe645509c38e38fa64e2ef8352192694cd65c

    SHA512

    a870a305b73e04ee0e12c3339fff5a7f47400e4cc42ea162a73bfde390f9f34ba7fafd5ca37e2490e95cde38f3d9ba04465881c37809cc0dcc72b29417fd2d17

  • /data/misc/profiles/cur/0/com.mtf.download/primary.prof

    Filesize

    2KB

    MD5

    86c631e67c758d92e09cb4e8ed40d5f2

    SHA1

    eae2c33d75184b5ad2275bf440353be737648d77

    SHA256

    7072a584d031796d30a26500abf555e63689e6fa0b534774dbfadedb14c2e0db

    SHA512

    2d68def5f6b3b1ed87951a1870bbfa6d8acbda102d8f521d4afa21e46bfed49141868c6c26b8fcbca94efac4c0f1df2b14afbea9de2e04d8e2d7708f8d8430ef