Analysis
-
max time kernel
123s -
max time network
118s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
21-12-2024 11:59
Behavioral task
behavioral1
Sample
client.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral2
Sample
client.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral3
Sample
client.apk
Resource
android-33-x64-arm64-20240624-en
Behavioral task
behavioral4
Sample
client.apk
Resource
android-x86-arm-20240624-en
General
-
Target
client.apk
-
Size
754KB
-
MD5
7b1643918f5d26fa70d5fb8ce8e8fa5c
-
SHA1
9fc18c7328b54c5c3aa9f2bf5af8e247165638de
-
SHA256
f50e4fb2b5379ee57eb31ee123e19c89da0201a1e1401a8a4b34d9ae5b5fa694
-
SHA512
4226bcad473adec7c5c9ac69a0b38702488d239b2aab56077872efa8ea61ebce3e485d46dd7b6e39c6463f6e84d82839a27831c05b7f40bbce18295ca2a75304
-
SSDEEP
12288:1byOB902b/u6LtOmKthmSoEQWPvdVDqFntOS37vY:1byE902a6BpKthmSoEBvdJCp37Q
Malware Config
Signatures
-
pid Process 4655 com.android.tester -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.android.tester -
Requests enabling of the accessibility settings. 1 IoCs
description ioc Process Intent action android.settings.ACCESSIBILITY_SETTINGS com.android.tester -
Tries to add a device administrator. 2 TTPs 1 IoCs
description ioc Process Intent action android.app.action.ADD_DEVICE_ADMIN com.android.tester
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
39B
MD5cbddd56da7882773dc4805a4e3c9c1b2
SHA17e4fea166daea02fca7999b69a758d7eed93f2eb
SHA25633fddeab551084db1a7f7868f4cb131ca90a68806c72c57c51117531d2bc625b
SHA5124da942c458d4f7c863c9e8d6a62bfedd792f20e82f3bc4bccd6872ff1eaaff50f8698114661af3b59a2b7f0bdcc14cba3ebab9fd75b476d127867a8831ec2c19
-
Filesize
1KB
MD507146390af253dc5cbe44446153c8807
SHA11a874afd895f17c23290a0693d9d5b29370ed16a
SHA256aeacd6c87ee6d6e974f98b80b619c230a4d18f31db05636b3782cac5e70f2162
SHA512a9a14b9ee88100618804ad19dcd6c50137571a41b5c76f5e93a943191f630ce27aadac0398fe968db95b9b582a3a84393df0ee093ad7a4138edd450d7cf5eaf1
-
Filesize
1KB
MD5f3a81a466234bec54afa6324880a306b
SHA190cd1979a64e5b6195d86b1931c7eae94e447d6c
SHA2562fe865fff43d198a8aaaa11d7e74524e51989d0dcf46693ba3488f1f7341759d
SHA5121cf16c924abd581e9d7c6575816d8904b9ca478f21480a8269b719490746a5bcce0f09192cf80dec2da24e2484e0b277b5d781752fad4269877f68e807dc01f5
-
Filesize
1KB
MD5c375d6e16ef5bf3317f3903fdd80340d
SHA1fa17bde550889f9803dcf9f17ff2cbd214e17643
SHA2566a195e4428f441d6d5c4715e141550f2adbe0365ef08c0920a0bcad6b3fc25a4
SHA51274e9c9bacaa50c6a2149e0555a6f70b4f1f605e08f5a20307b2d01a51227620105945c658a9b1ae55211c942faf5e2c95198c9b875617c13a431dea138725e24
-
Filesize
1KB
MD5ac80a6ad858f501f40795328c18692f0
SHA1962fbf45b5d8039ed9bb5a82a3cda8220d3b863b
SHA2569066d4ee8c3f0531f8c5277133865a97b798082e96486ce84c143c43df40ea80
SHA512b05e83751cd2b57308ff56e2f1801d16e12af79e83399ff3252f4bad1bf52660fbc7d49407e6254f722f84ad35b76a29404c32093721981e238cd4e629c5b573
-
Filesize
1KB
MD5362033154c333a1ff4f1846624cd3eb0
SHA1ead8d7fe5a87dfb5b7ccd206367eb6b164cf9121
SHA256839116bfae95e6b3acd1232b81ca8a6ee34e24dbdff591c6bcaa7cc3dba76676
SHA512ec386ae03100fe5bbe1ad3e854a361e4345757ec265e99eb1757212c64f6f408e02dfd2bb444f09d0c23c29c79a5d4f58e78453dc68fd45f78e1465ef503ebb5