Analysis
-
max time kernel
20s -
max time network
146s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
-
submitted
07-12-2024 22:47
General
-
Target
Taskerv6.3.13.apk
-
Size
38.8MB
-
MD5
daa5a377ff290d9185931dc777a2585e
-
SHA1
d5b08d811b1b7f28b115ec28c0101bf43c0e7132
-
SHA256
e93a76c88a14d98af3759701e210e24652148aaafffb8c9f4b474a003a0b7e4c
-
SHA512
0185443be59fdfe3f4504107c7dd4e7295237880ab16f06d157670c0041d263771add831ab22b28dd10bb9f55ec817c3a9a8150040cb28843a14ed49aff6c363
-
SSDEEP
786432:0K1UNHoAYXDdFeEm6qRrjPwCQ7j+j7P3AAUsfi2IRSPzOdclqouO:oNAXZcBPog7PQALa2I4PzsclvuO
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
net.dinglisch.android.taskerm1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24B
MD57da563dcf3139762cf7c10cf29a7ef63
SHA1b3cee3232a0bb1808378fe4d7021da08687f5590
SHA25689407372acf906f33fa545c22bba7378423523186e7b213a86eed891a0fa7646
SHA51244dd01a2f3715a5ddd7650dfb67064cc625010d8b1ead869611931219a03e87ba2ff93fb52d045304f0e4a2b0ad6e3b99949f977ca023a8098d23a02270604df
-
Filesize
8B
MD57d7b6918a2381246f848a289c3874996
SHA1fb712f409a9bcfeddd50be82edefed7940e2b3e8
SHA2563397a023afcefc40fdc481f9c96ea95f590e6a7967faf516e7b8b196c8382e90
SHA51266b35a63ebaa40eacd3401f3bd336a4d0a547164a6027e28d75968e0300be68114082c3421cf379af169697282bf5e7ecf04c9bfcefc71934701684171ca7147
-
Filesize
10KB
MD561f378e195b367df78cbeabef7409a83
SHA15b9663e6a0e974b9c2e55067600b8ab663309a83
SHA256d1c47a7fa1113ece873c3efdf7c5a0b4be97bc3014631ff2b4f3f0f04a055f66
SHA51230f26666fdc8edf085f24f899607c453ebd0d88e81e80df4d1b3732f615a7b81e989657c5541063e1fb015e94558d5b00f0ba12271349d9e8d1836e082a23ce6