cd3b473099e14b764d40d7b0a2c3af06989ed47bcacf1905187c9f161daf483c

Analysis

max time kernel
3s
max time network
131s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
20-10-2024 16:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

teset.apk
Size

4.4MB
MD5

d78bcab373c712a5e388d44d5226c0c9
SHA1

8722f3fd2a4e0f4dcfdac8403d546b15e9a46c01
SHA256

cd3b473099e14b764d40d7b0a2c3af06989ed47bcacf1905187c9f161daf483c
SHA512

528c6d0c32fd5dfc30d73e20bfe958eaa3dcc29604668c6cc9511f7069a1a2a44e017505e6a218ee3480568f7ce8b06caf8fbe7067f7e91cae5b6b2a804af5be
SSDEEP

98304:JCRvyt5L0qoyuGvwL5oPCx0WOttM0X3PZWVmzIzBTTY0tIKhrq:oVyTAqoy+oPCx9uMmtzkDRE

Score

6^/10

execution persistence

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.whh.premium

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.whh.premium

com.whh.premium
1⤵
- Acquires the wake lock
- Schedules tasks to execute at a specified time
PID:4620

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads