b86590cb117b0f5cb7b8f544b0f072a8a7ec011cf0465b5e956338ca41f63e8b

Analysis

max time kernel
46s
max time network
157s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
22-07-2024 06:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b42b7c037da8b170782d95da5512a86a.apk
Size

6.3MB
MD5

b42b7c037da8b170782d95da5512a86a
SHA1

0a0c1347817b861f82081914a96b15b425840f96
SHA256

b86590cb117b0f5cb7b8f544b0f072a8a7ec011cf0465b5e956338ca41f63e8b
SHA512

c625802b3878695e05343cd3f8f239208854bc1ce7267650e08b4d35171e09866474cf333036b2288f13b2da5bd12e50130bb5458e9425ca2aedbcda25879955
SSDEEP

196608:5bt8E+A0RNY80R7edzy9lUwuw9g5fKpdWgIrgx0uDmR7FRT:56E+x+8Ukwuw9g5fKzWgIrgwT

Score

4^/10

persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.example.img

com.example.img
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4938

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.example.img/files/profileInstalled

Filesize
24B

MD5
6f22fd568948feb32e9ff28e2930628d

SHA1
2a5d7af6d668dae6026478e55f84d6b739d30096

SHA256
5481914426c4fb60f547215f18dd07f5f718c02dde1aae6526701d4ef89685bc

SHA512
4eeb37cf6ac7421ab8c6758b6e93db0a8c83e90d3cc49f2e5ab21675c96b106591081cf42fae83f4e4b626ff2472b80954c275e227da06a1d1c080a8121718a5

Download Submit
/data/data/com.example.img/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
2e8614bd7cdf262319ec9fb4798a0786

SHA1
e454dba1bf786b6eb5449137ee7d8c08f5d64a68

SHA256
70ad5fcd5055ff84a15cfba31ec5ffdcc60d976a12940af2fce06d52e5298038

SHA512
fbd7fa6503e74bd1c85bcd80c65cc0c5476e486f57ba4521715a0876fe575a8e6ce5b04c8e044497494b10ec40c35da9334c57d0cd8418855723abc54d51a22c

Download Submit
/data/misc/profiles/cur/0/com.example.img/primary.prof

Filesize
1KB

MD5
0430dc05abf6731b46b9b1e0ac9c681b

SHA1
2c06df49f047e646f10340696ab8af5672892441

SHA256
3c0b7ee856ab0e9874997058bda0034ce1b2d6c71efd6db2825c44acfd027b4c

SHA512
50c03a4fddfa8f9faec7147633908460e27b6b996758dc390fd4dc55ca937334d7a096a951e60077e786d3d77e06f0a28890b11a018692e9f60cbaac915f7f00

Download Submit
/data/misc/profiles/cur/0/com.example.img/primary.prof

Filesize
4KB

MD5
e2a371fd15a6dc1837cc90e55cd591bc

SHA1
9831ded8c8ce8d33bebb0338af4cf2cea1decc1b

SHA256
531b3fac938216405807bfca987d66eb6ab257f3d9e155dfcc768c7b5a493e32

SHA512
591229e1b7f9a43e6889288222142218ab91e850609e3cd6d0600d49a13bb9a52d5dff7cf138b3274420dea03d1bd57bfb706cd635c72e3c73936640962edc61

Download Submit