Analysis

  • max time kernel
    149s
  • max time network
    156s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    21/12/2024, 12:33

General

  • Target
    ready.apk
  • Size 36KB
  • Sample241221-prphvszmbl
  • SHA256 2bc8f204b1eced2067893442bcb644f5d8c78495a3eb484a9aa01a17d15a2b08
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Removes its main activity from the application launcher 1 TTPs 1 IoCs
  • Loads dropped Dex/Jar 1 TTPs 8 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

Processes

  • package.name.suffix
    1⤵
    • Removes its main activity from the application launcher
    • Loads dropped Dex/Jar
    • Makes use of the framework's foreground persistence service
    PID:4407

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        hDtjF0

        • Path /storage/emulated/0/vlH3T/hDtjF0
        • Size 5KB
        • SHA256 4a4fc7c3a186cd6a2b25c263c89de58c116eded781b261a0630944e4513d2121
        • MD5 SHA1 SHA512 SSDEEP

        hDtjF0

        • Path /storage/emulated/0/vlH3T/hDtjF0
        • Size 5KB
        • SHA256 4e3eee99c5f0364058476ffc4fd2f184bf8c731a656b09eaaab5ffd91887dce7
        • MD5 SHA1 SHA512 SSDEEP

        hDtjF1

        • Path /storage/emulated/0/vlH3T/hDtjF1
        • Size 4KB
        • SHA256 4830f1d48d41c7725686901a2d4f93a8ea722f6160dfecc6815ac85598e361db
        • MD5 SHA1 SHA512 SSDEEP

        hDtjF1

        • Path /storage/emulated/0/vlH3T/hDtjF1
        • Size 3KB
        • SHA256 5a9b87d66daf4ad4791d980d9c3270c7806bc18c89e323472a500fb8ebfefc5e
        • MD5 SHA1 SHA512

        hDtjF2

        • Path /storage/emulated/0/vlH3T/hDtjF2
        • Size 5KB
        • SHA256 47bb8e56ea3c98e4a3a8b1e557e8b8d7683683e6657df223907b7c1ef085018f
        • MD5 SHA1 SHA512 SSDEEP

        hDtjF2

        • Path /storage/emulated/0/vlH3T/hDtjF2
        • Size 4KB
        • SHA256 9a0285c31c82617f5d5823210791ab57fa29c92ca8107b0fa0e7a7a35be96af8
        • MD5 SHA1 SHA512 SSDEEP

        hDtjF3

        • Path /storage/emulated/0/vlH3T/hDtjF3
        • Size 14KB
        • SHA256 e52f6bd5f4c81fc5b58a40b466cd115346f9a7ed4bea729a0936d07f5151e508
        • MD5 SHA1 SHA512 SSDEEP

        hDtjF3

        • Path /storage/emulated/0/vlH3T/hDtjF3
        • Size 21KB
        • SHA256 75495c0ea5e5d1330481727b4f1ebd070dc876a49d9eec003a80c4261612cf7e
        • MD5 SHA1 SHA512 SSDEEP

        hDtjF4

        • Path /storage/emulated/0/vlH3T/hDtjF4
        • Size 10KB
        • SHA256 bb490b6289c2760651d29e2b7a9ae03446197bc92ffcb8084278c1ac5e588e29
        • MD5 SHA1 SHA512 SSDEEP

        hDtjF4

        • Path /storage/emulated/0/vlH3T/hDtjF4
        • Size 17KB
        • SHA256 fc36f237a777fdc1038ed21ce53992a034be28e9e7a019a9ff6c7e2f77637ae6
        • MD5 SHA1 SHA512 SSDEEP

        hDtjF5

        • Path /storage/emulated/0/vlH3T/hDtjF5
        • Size 7KB
        • SHA256 d365285ec8822cc96ffa79d9596e03bb0fef3bcff4d2cf9b890340fec6458459
        • MD5 SHA1 SHA512 SSDEEP

        hDtjF5

        • Path /storage/emulated/0/vlH3T/hDtjF5
        • Size 9KB
        • SHA256 2b111730487405bef3ad063f3bad8bcbe409fac4ee00c08ce6122b27c6298254
        • MD5 SHA1 SHA512 SSDEEP

        hDtjF6

        • Path /storage/emulated/0/vlH3T/hDtjF6
        • Size 5KB
        • SHA256 e15552b3ab0824370ff36e1ee461251d72fef39ab75722a56064259049370b3e
        • MD5 SHA1 SHA512 SSDEEP

        hDtjF6

        • Path /storage/emulated/0/vlH3T/hDtjF6
        • Size 3KB
        • SHA256 ad712097c583f970a7490dcd56f6c85fb3398dc6a5922b8477617fb741385eb0
        • MD5 SHA1 SHA512

        hDtjF7

        • Path /storage/emulated/0/vlH3T/hDtjF7
        • Size 4KB
        • SHA256 5468034e8a0355df93f6b070a8025304900219588f6c946f4ad37ba5750a53c0
        • MD5 SHA1 SHA512 SSDEEP

        hDtjF7

        • Path /storage/emulated/0/vlH3T/hDtjF7
        • Size 3KB
        • SHA256 58d71a9c91d09e4a5e3cbf4c543daf97e8f2ce31295efb6547d3eb535bd9a148
        • MD5 SHA1 SHA512