9f0460662f390a0c5ca40b0ae41a5205a72553c9df68e4afef53d9becf6fae12

Resubmissions

26/03/2026, 10:42

260326-mrp4aags9x10

02/12/2024, 23:23

241202-3ddfbstqdp7

Analysis

max time kernel
12s
max time network
132s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
02/12/2024, 23:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Build.apk
Size 10.1MB
Sample241202-3ddfbstqdp
SHA256 2008b7e4c6d04d11e51dfd75d466365d1aaf66ca4c50e60c53ed9b0a514ef286
MD5 7476eabbf756bc6eff06f8dac6f26bdf
SHA1 3d7b362bf9a9afdb5824900a50d25791efba97ec
SHA512 ebfbc329f1a9e5d68e2a5e54e1105eb66f348fa1c1e2669f02e76fa8002c76ceb1bf8601a1f0d3a4cb912b66cc99293a7205b090800c92d793220f7e9982bc2d
SSDEEP 196608:fOzo8DogfSlt0XjFfeSZWytSGa+bW8KZs5tvKNKu6W8uqOvbu/uXWdwXks1woZDW:fYXkgfGt2QSZrfKyjKNK4llTcuXiMZDW
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection execution impact persistence privilege_escalation

Malware Config

Signatures

Reads the content of the call log. 1 TTPs 1 IoCs

collection

Call Log

T1636.002

description	ioc	Process
URI accessed for read	content://call_log/calls	com.example.myapp

Looks up external IP address via web service 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
6	ipinfo.io
7	ipinfo.io

Tries to add a device administrator. 2 TTPs 1 IoCs

privilege_escalation impact

Device Administrator Permissions

T1626.001

Account Access Removal

T1640

description	ioc	Process
Intent action	android.app.action.ADD_DEVICE_ADMIN	com.example.myapp

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.example.myapp

com.example.myapp
1⤵
- Reads the content of the call log.
- Tries to add a device administrator.
- Schedules tasks to execute at a specified time
PID:4246

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Abuse Elevation Control Mechanism

T1626

Device Administrator Permissions

T1626.001

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Protected User Data

T1636

Call Log

T1636.002

Command and Control

Exfiltration

Impact

Account Access Removal

T1640

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/com.example.myapp/files/profileInstalled
Size 24B
SHA256 aca9bae5ac2e6e2cd0b4da76c5a52c1797ac3361163cdfd89c85918d3b7b73f1
MD5 b65fcbd0e7e1f30280a963e1af65aabb
SHA1 76ab9922233175c270c4dd3f11fdd7436ddb984f
SHA512 a7206b74089601f5706dba1ce42d311b523e4f8b682eed6155b9c8a9b429ec099468e0e87d51bec7dde86c5a9d85d1242a442c9d7bbcc3e2a769cb7bf37d0f1b
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/com.example.myapp/no_backup/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-journal

Path /data/data/com.example.myapp/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 04962e0e4022dbfb69775bdf76b32f9ee6fafec30f7094e5b5c015f13ce78be6
MD5 fe295a7cdd649b2bcd98c2dd7574952f
SHA1 bce56869fea4810a11c517c2e0753bc3153b70bf
SHA512 46a16de3a027dc0608d9ef8c97d25871714ddd02a6f131ec4b581ab454152fbbc162d343c029c2ad9d99ee2cbce3347237dfc3f5cd8e6cf62f5a633524c9acdd
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.example.myapp/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.example.myapp/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 7adb09a93d04ae2e7c0418c7cbfd8b6fcfd012b3235dbe9f9183b03f40a48533
MD5 58799325f84d405f8ccfe166483d4075
SHA1 23fe5609e11d2055ad98b0a2fbabd47d926424ce
SHA512 413f8f51c7f1c4a89abc73844248bd358f496a06b4663df484b45922a19b707c746a57ba248bcc6b1fbbddf6a8b14438165f17dd6fa362a3b22a389c35404421
SSDEEP 6:Kyf/qAx/149FZdrlOERX4PBX4ogLugMBX4suuK+/Wg4//yfcKZOw2:KYpMzdTRmBEyPbP/Wg4/6fcyOw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.example.myapp/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 607db515da8a53e7c09fbc6c582953d3764d7c0f06715c10254d6941b182e3b3
MD5 3b073fc8054b8cac7c09c095d7c996d1
SHA1 062a88a881d8ba1c4b3299135ca81ec9e311db89
SHA512 be903d5ce9b42928067a0b2274d865700a775f9123c773cc5119df4dec270eadf22839a1085c60c0006ca8cc34a166ecd3c49f55c209db0517c8cd5fe1311eaf
SSDEEP 96:O6+hdjnHtDRMpf8UzS6+BD8q0ExPBvLx0KJ:udjnHt9Mpf8UzS6+BD8q0E5Bzx3J
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.example.myapp/no_backup/androidx.work.workdb-wal
Size 197KB
SHA256 92a84d4537e2fccd44f20c31f6f3ecf7327d65144a506f08dc6dc23677613674
MD5 83e7ff28930a0b0bea3780716691ab30
SHA1 cc329c8d5984d7ffd216c53601cf2ba578540d79
SHA512 a6786bfc519b55a89099acc46a754c94e1d36cdc0c2a076d9fcff1b9a0227c005d9ab330cf4ae0c1677ed7f36dfdf56ea0810172ca4236bbfd307076dbb6a380
SSDEEP 48:eYHtYVBiObzhbzvrbrz1VzFnYHtYiRAw4TYHtYEYHtYS5YHtYI:hHtYeOb1bvbrf6HtYzMHtYnHtYlHtYI
MD5 SHA1 SHA512 SSDEEP

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads