bdc02f8d7aed97a6c5bc2e6dd43fced79e958c9d000edff59547686627919919

Analysis

max time kernel
178s
max time network
133s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
10/08/2024, 14:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

patch.apk
Size

148KB
MD5

3fab9e8b0858b6f525c6d54a4a7f8b5b
SHA1

f57e40e1a2ee8bc866ced12b7c6a36365a7dfeee
SHA256

1b779958f154b2dbd8a01f5c97863b5156491e0b09735935cd4b8680872fc371
SHA512

8114be5b8235411dcec39f2fc1a258c82bd3741572a32fa93dc5f791543541205c334962f9dc3ea7b0b2c37c62ef0588f75a54feeec80b7c258625064b1b3380
SSDEEP

3072:XzoA3ww6TyJOtd0U704ip2zKxgOsCOnpqSsmnGH/FHBg:DZ3wkcd/wb2zzOsCmoMCI

Score

8^/10

discovery evasion persistence stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
4256	com.android.system.patch.v23

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.android.system.patch.v23

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.android.system.patch.v23

com.android.system.patch.v23
1⤵
- Removes its main activity from the application launcher
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4256

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/Android/data/com.android.system.patch.v23/cache/uil-images/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit