Analysis
-
max time kernel
304s -
max time network
610s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
-
submitted
18-09-2024 12:28
General
-
Target
Tasker.ver.6.3.13.build.5395.apk
-
Size
36.8MB
-
MD5
e44093c41d157e1e2c761d4a63b3515c
-
SHA1
3a38c12467834fc155c755090573bf67d205dbf5
-
SHA256
851f3f8ea378a611f5a7b1171717f3ea5660f7a27ad0d5c34ab2a0414fafbcf1
-
SHA512
4bc640be5addebb4ad1189f2efedb322328b4094c9d0565597b20a9f4642891014305d354cb385c5bf6acd1ba36eac0c997354ad25b51d4155e1e8164b69a1c7
-
SSDEEP
786432:Ie8y4HOQKcAm6qRrHPwCQ7X+j7P3AAUs7i2IRSPzOd8R8USMnU:IeCHJN1Po07PQALe2I4Pzs8RxSh
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
net.dinglisch.android.taskerm1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24B
MD57cc50cb2832eaafa7b016ff63e28854f
SHA136115aded50bb7923f31dca8ec8c0e90f5d81667
SHA256ed35ecf6ab38d76b6e8b0eb46146afe62d0856a3a2c3024e9a9ab7ac27117ae8
SHA512a5ac4494a78f9636437d3fae714b8873b58eb9d6bf0440f2bd3ed6d319221ff91731ca106913f8a798fb6414accceeca1d3014abdcef7da6a42a0b84a3cf4ea1
-
Filesize
8B
MD5975912edd89b41ce9830791a2daba7ce
SHA12271e46a4791dc0e0d057e06ee8fc03c6e5d4bd3
SHA256ffb57bc9221fbc648fc04ac3c1f98336dc6c9ac1baa471c69c1b784768e9fd23
SHA5121f62b39bbbcb9ab953ece537c5498da23bde9745ea1471dc5cdde99dd14dd26f6fc4cff0617a04d22aca2d5e344e147893b4c925547f41f1bfa1c73cb72ffce5
-
Filesize
10KB
MD561f378e195b367df78cbeabef7409a83
SHA15b9663e6a0e974b9c2e55067600b8ab663309a83
SHA256d1c47a7fa1113ece873c3efdf7c5a0b4be97bc3014631ff2b4f3f0f04a055f66
SHA51230f26666fdc8edf085f24f899607c453ebd0d88e81e80df4d1b3732f615a7b81e989657c5541063e1fb015e94558d5b00f0ba12271349d9e8d1836e082a23ce6
-
Filesize
21KB
MD53cdb89ceab1cdd841e0e1ce22ceec52d
SHA19d1f6f333f834ea4251da54cebf2253f052cdf37
SHA2565a681480df0fdb8bb24ad0ca32ebc3db8dd9d9ebf1341e61b22113a59e7a165a
SHA512396ac7ca77a7ab9c0ce247e31c44dc1b002064d6121e79654cb4f8129543cfae04629bc8ab4f1342cae3a1918a68d76b6bfcb1273b5b5399633dd04c0a71553e