Analysis

  • max time kernel
    2s
  • max time network
    132s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    18-11-2024 23:47

General

  • Target

    EdalateMan-v7.apk

  • Size

    3.6MB

  • MD5

    c55d4bf5a53f4b977e4e063e73b3a7a4

  • SHA1

    1157ce9bb56cd770e0bce97c9b8d88ea0a191ff9

  • SHA256

    d7d834ce199e3ac7889f18e83b32e5a2aec5b043619fc471bc92a50005f58c41

  • SHA512

    634d59d4f1cb0f3ec93a4bfe20c07368157d02f0487aebcc6e535198c11bf9ed6320f34fdde1db9d76b70d1943bd61d8ca99a48e75a16c91236b0a404a188f75

  • SSDEEP

    49152:Y0uwlP1CEhlH5bkjWadNvjvFYKSNG9QZ1j4Q0PIldSFrU/f6QzlJZsreXDj8Jy:bRUM5bkjW4hjMNkQZeSvJGreXsA

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.ghost.app
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4260

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.ghost.app/files/PersistedInstallation4265976260805242849tmp

    Filesize

    90B

    MD5

    6e8a2f4886e14da4fd9e40cfc278a64d

    SHA1

    63e76b88afc8f696cf5cb110622fe3fca20725b5

    SHA256

    e00f7e361443532532518bb50ad14c93539e1da81a99c310afccebdf7a6c6f97

    SHA512

    6d7e4b6d832b4497415a06ccf9b7358b92d67c4d7cabfb1e474bc5da8032f51653c2be6e44917183a7d6c96d63a58c8bc3f533b68e0315ba72c8bd8b92eba90d