Overview

overview

10

Static

static

10

e77cb0aa9a...cb.apk

android-9-x86

7

e77cb0aa9a...cb.apk

android-10-x64

6

e77cb0aa9a...cb.apk

android-11-x64

6

Analysis

  • max time kernel
    122s
  • max time network
    154s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20240910-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
  • submitted
    05-09-2024 22:00

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    e77cb0aa9a624cf66f83a8832af3b12dc9536a4ad24ed30bd194c7723bd3d6cb.apk

  • Size

    3.9MB

  • MD5

    8b83ff50b4b15eefe846ec24e750091c

  • SHA1

    fe59eb92b1a27f7a7a64f6d319e38e5ef8b596d5

  • SHA256

    e77cb0aa9a624cf66f83a8832af3b12dc9536a4ad24ed30bd194c7723bd3d6cb

  • SHA512

    d1fa9aa27d2209bc42967c0dd669d8f651bc8d7ba5285bd090536f7da9e320d73297a36ba2acf4e8da227f09e226c07348d9337357d0d2accedafa3fb3b179e2

  • SSDEEP

    49152:Y3gHkefQN3R/bq6ZqOO2zuH7k4gX1qw/B4qNby02RxFgBML+t9g1/ynPDWFQi9kb:sgHfINBlZqGzw7kFFKJgiLG98yPDG0

Score
6/10
evasionimpactpersistence

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence
  • Performs UI accessibility actions on behalf of the user 1 TTPs 1 IoCs

    Application may abuse the accessibility service to prevent their removal.

    evasion
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • com.millikan.rosel
    1⤵
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Performs UI accessibility actions on behalf of the user
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4728

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads