a6a184dfb4591547818c5ae3a0975b36267b8c4e1e0d3cfb1aefb655da316e09

Analysis

max time kernel
8s
max time network
157s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
01-11-2024 17:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

e530813391ea660ddc3b94495b060a5b8d73368aff5ad8a3ab3f645234c764e5.apk
Size

17.9MB
MD5

c878f89fc345d39a5b599c167ce23fa5
SHA1

eb323deaa19469557b81bf99cf1aeb13c268c1d8
SHA256

e530813391ea660ddc3b94495b060a5b8d73368aff5ad8a3ab3f645234c764e5
SHA512

a53b13d285d7c5962a45afc929228c2ce94de344a50def687285341b6fbf3f67dd445544e4e9cee8d4bc60998c0d0cb86d981c80fa5c69af2f01cff24c8e93d4
SSDEEP

196608:DS69BN8O5zZcRGGBEbcjxrlzDV6Ml7asRyOdtkXGXXwcKJmUMGlOrINAHKdMabDr:DL0OGBEbc1Has0OdtcugchNXrINndjX

Score

6^/10

evasion

Malware Config

Signatures

Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs
Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).
evasion

Code Signing Policy Modification
T1632.001

Processes:

com.support.litework

description ioc process

Framework service call android.content.pm.IPackageManager.canRequestPackageInstalls com.support.litework

description	ioc	process
Framework service call	android.content.pm.IPackageManager.canRequestPackageInstalls	com.support.litework

com.support.litework
1⤵
- Checks the application is allowed to request package installs through the package installer
PID:4925

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1632

Code Signing Policy Modification

T1632.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.support.litework/files/profileInstalled

Filesize
24B

MD5
573ca66ca697508fe479b0855ea243ad

SHA1
8c25ace438447e1d783541a8eafae588d2b34250

SHA256
4fbe38e725da674da0fea5bf7478c94f9b78c6e66ada8c5de15f47efa55b2cc0

SHA512
6a0dae035c3e18b766d53c06d12da3d1f3d5778fad17776c709ed6f5af55c49cb133fac686c8416cc90bd165b3dd87f980d5c1d118b0e21acbd0aab0772aa96e

Download Submit