41419a535e1492f32751e19db78bd1f71736b6d3e51fd93feeb65fad36497367 | Triage™

Analysis

max time kernel
205s
max time network
305s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
19/09/2024, 17:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
TASKMANAGER.apk
Size 256KB
Sample240919-vx3kkazhpc
SHA256 41419a535e1492f32751e19db78bd1f71736b6d3e51fd93feeb65fad36497367
MD5 20d8603314a52b75dad2a577ef785063
SHA1 52a1c165f0346198f1c7af72a964b59df98b2672
SHA512 6b15cc190ac09620170afea44c5354472166b1483364b231745bd4d6b1a7f47782f74f69f65e2852d843ee9fcf5470c61cc1d6d3a64b1b9a740f24e585cc08b0
SSDEEP 6144:Gtr/W679Wl+MJR2mEvLWFmglzdiIvBSJI7HarCcgxsA:GH9W1AzglzNJ+I7a0xJ
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

collection credential_access evasion impact stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

pid	Process
4919	com.etechd.l3mon

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.etechd.l3mon

com.etechd.l3mon
1⤵
- Removes its main activity from the application launcher
- Obtains sensitive information copied to the device clipboard
PID:4919

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Suppress Application Icon

Credential Access

Clipboard Data

Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Replay Monitor

Loading Replay Monitor...

Downloads