20dfb6c66a2859f3774a0649f15977d8348ebc5fff8f7b3305073fd9afb0f2af

Analysis

max time kernel
6s
max time network
150s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
01-10-2024 22:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

20dfb6c66a2859f3774a0649f15977d8348ebc5fff8f7b3305073fd9afb0f2af.apk
Size

2.2MB
MD5

e41ed01927e048e253f4b8edf53b728b
SHA1

9b8bcef150982712e7ab686bc57b89a1db12657f
SHA256

20dfb6c66a2859f3774a0649f15977d8348ebc5fff8f7b3305073fd9afb0f2af
SHA512

fe342706e4b8c5560b5986862ce01cf49e8df7b04a91ec09599eac0f6ce9f5d229f8c3c9f608191030d64acba1ff24497d2178e8e6803f62a2628945c86de00c
SSDEEP

24576:1ZYxRxT9XdS36yHCmIxTrQv8p5rF/w21mE1q7ic3MDUlU1:rIT1zyHEnQv8p5pB1S7ic3MoU1

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4808	com.monospace.battery
/system_ext/framework/androidx.window.sidecar.jar	4808	com.monospace.battery

com.monospace.battery
1⤵
- Loads dropped Dex/Jar
PID:4808

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.monospace.battery/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
7d82619dccaff59a4ef04bcdb95ee7ff

SHA1
056b8513af3a420dd448c4cf1f69c94a2c64a9ac

SHA256
f0c5408bbb0bf34d2ab82d1a0052411e866d4dba82a55b67e5268c25a99b91f7

SHA512
c071228091d984895c02678bd5132a65a4e7e61c044bea2d4401c83b88a7c243b7b611f53a38dfeb91f04cc1ff36abb75855f8c714b0c3a392237fab932dd3a3

Download Submit
/data/misc/profiles/cur/0/com.monospace.battery/primary.prof

Filesize
1KB

MD5
5f6452f8047d853ab7969dab5ab6834e

SHA1
6062bf796cd1600070e878f42a3defb0676c5d64

SHA256
672c792d63414148eccf8720c214e1a602ea67b8501d5ab48fce3da4738e5b00

SHA512
192bdf1bbafc0a42ca86f4926300cd320741488d41b676d498ed804017b34b6b111a001864eb7e48d4677772883db6eb7e1613f3adf5192797b93c896a490c3a

Download Submit
/system_ext/framework/androidx.window.sidecar.jar

Filesize
12KB

MD5
bdf3529e80318eb14e53a5bf3720c10d

SHA1
25c9ace4b1af6e80ebb2572345972c56505969ba

SHA256
bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

SHA512
48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b

Download Submit