f75678b7e7fa2ed0f0d2999800f2a6a66c717ef76b33a7432f1ca3435b4831e0 | Triage

Resubmissions

22-07-2024 08:39

240722-kkhphsyejr 10

22-07-2024 08:35

240722-kg1qxsydjl 10

22-07-2024 08:34

240722-kgmt3axgnc 10

22-12-2023 01:58

231222-cd5lpsegcm 10

Analysis

max time kernel
179s
max time network
138s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
22-07-2024 08:39

Sharing

Report Analysis Logs

General

Target

4e2201cde26141715255d2421f0bcfb1.apk
Size

536KB
MD5

4e2201cde26141715255d2421f0bcfb1
SHA1

8b72d02b37ebef285890e1875a2ee6e6134e4259
SHA256

f75678b7e7fa2ed0f0d2999800f2a6a66c717ef76b33a7432f1ca3435b4831e0
SHA512

5fb574b504a2d67505a061ec01c77b36a0ecabb536bee4543e7a80f7204bdecdd948d65c4d402f5ba906cfedf2d40a148808e718637c22bf30e84a91e7d097b3
SSDEEP

12288:gjRH6+O//n3tKpSsM+1HA+uVlcVS3EVqPlR6i0Ci3jM34D9W:gN6+ONjstgbLOS3EW6i0C+M3SW

Score

7^/10

collection impact privilege_escalation

Malware Config

Signatures

Reads the contacts stored on the device. 1 TTPs 1 IoCs

Contact List

description	ioc	Process
URI accessed for read	content://com.android.contacts/data/phones	com.elite

Tries to add a device administrator. 2 TTPs 1 IoCs

privilege_escalation impact

Device Administrator Permissions

Account Access Removal

description	ioc	Process
Intent action	android.app.action.ADD_DEVICE_ADMIN	com.elite

com.elite
1⤵
- Reads the contacts stored on the device.
- Tries to add a device administrator.
PID:4215

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Device Administrator Permissions

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Protected User Data

Contact List

Command and Control

Exfiltration

Impact

Account Access Removal

Replay Monitor

Loading Replay Monitor...

Downloads