Overview

overview

7

Static

static

6

d8a93477c4...7d.apk

android-9-x86

6

d8a93477c4...7d.apk

android-10-x64

6

d8a93477c4...7d.apk

android-11-x64

7

Analysis

  • max time kernel
    48s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    12/07/2024, 22:07

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    d8a93477c467483d0dc0fbf1b881bd9d38a6baa2966b450be3ae4e9af59c557d.apk

  • Size

    4.2MB

  • MD5

    5115cf9708b6aff9b75a2b4233ca9862

  • SHA1

    7916def8075f61d07d8a6b18654e7aee4669235d

  • SHA256

    d8a93477c467483d0dc0fbf1b881bd9d38a6baa2966b450be3ae4e9af59c557d

  • SHA512

    3981bc6dc59c2340003fa612aee12ec77c6052ada6aaa9519f4397b7592799382f6dc8257ce3205987fe140268c8a1784fb57c71035ee004119781d6fb35ad1d

  • SSDEEP

    98304:+LreIlC1qoTwrIY8GEkZNDyorugyCY1/HuC:T4C1ulNDqgyBhHuC

Score
7/10
discoveryevasionpersistencetrojan

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
    evasion
  • Aborts a broadcast (usually for hiding system events from other apps) 1 TTPs 1 IoCs
    trojanpersistence

Processes

  • com.vcacdfccrfve.testjuly5
    1⤵
    • Loads dropped Dex/Jar
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Aborts a broadcast (usually for hiding system events from other apps)
    PID:4341

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.vcacdfccrfve.testjuly5/cache/volley/-1954231640619625019
          Filesize

          865B

          MD5

          72526adba9e663284550a5203ab0e380

          SHA1

          a789ec21f87317ceaa0ce6b3dca52cd83f9a2962

          SHA256

          1ab3994e5284a34ecf5f970cc121a7284a107216e6dab3807eeb7b91d91d90a9

          SHA512

          f03965e09885391b7e69372283a6177a3a231536057d172c640cb1d88041ec31d2bf28fd88cbaa91c0d3fc1dcd0962c522f284a81e4abb09030400f8eab09593

          Download Submit

        • /system_ext/framework/androidx.window.sidecar.jar
          Filesize

          12KB

          MD5

          bdf3529e80318eb14e53a5bf3720c10d

          SHA1

          25c9ace4b1af6e80ebb2572345972c56505969ba

          SHA256

          bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

          SHA512

          48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b

          Download Submit