1fdb684e3fa9de184c857cb33f32526c3c90fd39af56e6e69b3e0ffb781c52b0

Analysis

max time kernel
3s
max time network
147s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
14-11-2024 01:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

寫真.apk
Size

11.4MB
MD5

4d454ff191e33f7645342af27f3de6b7
SHA1

133049ae797b82e6a8e8496638aef6be148768c9
SHA256

1fdb684e3fa9de184c857cb33f32526c3c90fd39af56e6e69b3e0ffb781c52b0
SHA512

00127f27c5e5041cba89a7c564f7dce811dc267691c8b3cdd2290e174ef013a674a7264c4043e5e9b3a63da07e1cd5577894b340bd2117174926f11e5836b323
SSDEEP

196608:QjAW4HuA18JzS9g1OAAFAmfnmI2oeRbfqfC+8s6zh9e:wd3A1mYg17Yj/m/Zuv8NTe

Score

7^/10

banker discovery impact

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	attitude.publications.rf

attitude.publications.rf
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4929

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact