Analysis
-
max time kernel
47s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
07-12-2024 22:47
General
-
Target
Taskerv6.3.13.apk
-
Size
38.8MB
-
MD5
daa5a377ff290d9185931dc777a2585e
-
SHA1
d5b08d811b1b7f28b115ec28c0101bf43c0e7132
-
SHA256
e93a76c88a14d98af3759701e210e24652148aaafffb8c9f4b474a003a0b7e4c
-
SHA512
0185443be59fdfe3f4504107c7dd4e7295237880ab16f06d157670c0041d263771add831ab22b28dd10bb9f55ec817c3a9a8150040cb28843a14ed49aff6c363
-
SSDEEP
786432:0K1UNHoAYXDdFeEm6qRrjPwCQ7j+j7P3AAUsfi2IRSPzOdclqouO:oNAXZcBPog7PQALa2I4PzsclvuO
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
net.dinglisch.android.taskerm1⤵
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
-
sh2⤵
-
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24B
MD515c15d1ed1f0feab96ed267a51cedce1
SHA1826944b4336746322fce91740bc4bfda892a5842
SHA2565176520e1cb33bceea3658cfafb858b5dcb3a93c0b1b118c7ff29112ab5e6369
SHA51201457c7cb44e489b03649f2908add7025e02d7a4d367264ac4b5e3c233bc01910bd0c29d96c61d0c712fbb36c8cec5a69724e4e7914a3eb259adf75c1240d6e1
-
Filesize
8B
MD56b2b55a32e5bea4e52bb7dc0f1e4b632
SHA1067b35ec94aaf3e61a103f05bb50fe3bdb09bfe0
SHA25619db54206e6f857564b17f3f0b33e4d1ad0530f54999026bcee03aef6ce8689c
SHA512f1ef18c61ee846d1ab64637ca4eb418b9c69b6f6af151ee38513d80c777ab1a41ea2ee8c0092febda9efb3dcc002158349cf67c89c0cfc13afde5ff14ac87893
-
Filesize
10KB
MD561f378e195b367df78cbeabef7409a83
SHA15b9663e6a0e974b9c2e55067600b8ab663309a83
SHA256d1c47a7fa1113ece873c3efdf7c5a0b4be97bc3014631ff2b4f3f0f04a055f66
SHA51230f26666fdc8edf085f24f899607c453ebd0d88e81e80df4d1b3732f615a7b81e989657c5541063e1fb015e94558d5b00f0ba12271349d9e8d1836e082a23ce6
-
Filesize
20KB
MD5cd70611d3451ee502d27bcc5af858306
SHA119bcd2f2a9d75dde5ef9c463e34e0ed3ef49890c
SHA25672ed4b0cb8dfa471cec07d4ef2d51b9b5358f74577b7e70aa61f5a0889f90913
SHA5128a643f4a4baef5f0cb9c86b640e01acd4c593fae330ece064c3a8401075e134a1da37fdf2a41a6ae3f1fdbd63cde2a6c580af121aae0bf77f7a2ce0d033b5525