b4b36dfa6711a3870c7aa66fd302b7b6d745285581689e647bff43cade101bbf

Analysis

max time kernel
64s
max time network
74s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
14-01-2025 14:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

net.dinglisch.android.taskerm_6.4.10-beta-5406_minAPI21(arm64-v8a,armeabi-v7a,x86,x86_64)(nodpi)_apkmirror.com.apk
Size

38.5MB
MD5

da563b135331583cfe1a30480a3c2285
SHA1

91f2335eb151bc3d894a69a17d24559885b4fff4
SHA256

b4b36dfa6711a3870c7aa66fd302b7b6d745285581689e647bff43cade101bbf
SHA512

5f9fc6894a8e6da412bf89c338a20d3796c7535d8a2c6b9a907127ddfa2e75e9071728965e6e8bd02472c67f47b94bdd6b086f0f134d7186c7cd606bafb5ecdb
SSDEEP

786432:/KjtOUEm9Ba8sF7ghdNm6qRrMPwCQ7I+j7P3AAUsYi2IRSPzOdbkjKLvOAnqA:/ClrK8sFYwyPoD7PQALX2I4Pzsbk/AqA

Score

6^/10

discovery evasion impact persistence

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	net.dinglisch.android.taskerm

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	net.dinglisch.android.taskerm

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	net.dinglisch.android.taskerm

Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Intent action	android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS	net.dinglisch.android.taskerm

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	net.dinglisch.android.taskerm

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	net.dinglisch.android.taskerm

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	net.dinglisch.android.taskerm

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	net.dinglisch.android.taskerm

net.dinglisch.android.taskerm
1⤵
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries the mobile country code (MCC)
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4273
- sh
  2⤵
  PID:4344

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Foreground Persistence

T1541

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/net.dinglisch.android.taskerm/files/profileInstalled

Filesize
24B

MD5
b5afae9f47fdcd38c8c6c447dd301280

SHA1
f23fa22e26a17c2228194311d262ee142166d680

SHA256
75d41a383ca5a76af84d9d1cf2fac73ce133341d5f5077d4d6d5e6602709d289

SHA512
f83d94c68de89ac7de7f15cfb0eeca3c6d67d26634017b404aa0820062543b4c7d5ac587ec622f96baf9b112dc97925eddc257f78ecf3ec07e999e341461058b

Download Submit
/data/data/net.dinglisch.android.taskerm/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
141e9418a4e28a399f8f0a1f6aa95b00

SHA1
4200978d1ec4e4e367e8e514348724ecf1181eb5

SHA256
b056f134568fa42c07e6366a13b04fd45eb9572831d4659cf7bd96b66bdf7737

SHA512
fe8fd24e7398457372250a023c50a1bbbbb0131dd98c5271653209fb44780dfa8249cf402e3a4758c2a2dd1cbcee7edf850714ceb9d7c11bf591bae0ff15b222

Download Submit
/data/data/net.dinglisch.android.taskerm/no_backup/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/net.dinglisch.android.taskerm/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
bb0344be7ff1971dc2f0511dbea84b8d

SHA1
5bacbb2af7b9e60c6569226270f3fa7638e63287

SHA256
8134065ef1a9270421f6b070f11fb472ab8d9ff8b6b90b299285ca0cbe1692e7

SHA512
d34972feb40584404fbb0ed83c462cf3620e609925f66c96afb419ed38f6c04814cab581c588dbb6f2518d084df86c1954e6e5fe302c43f5b4341bfe1b70854f

Download Submit
/data/data/net.dinglisch.android.taskerm/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/net.dinglisch.android.taskerm/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
1ff5d269b231e7ae67b17408d885bac9

SHA1
07ff18162da2ac003124b2cf8c31f4b462394b8f

SHA256
63ed0cfabaaecae149c8ef35aa9a65ce3e1677d5429a9e382c078af5da19f327

SHA512
d7b06b0b0b534b8164a4d30bf37b212d248a2e78dfa4a58b7b2e4b579417aeed75f4d5d8cf1729693afd979f6df349e9227f0646667be4ce3aad1e89402f4643

Download Submit
/data/data/net.dinglisch.android.taskerm/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
eb17fec22809d5f95f0b0e86a71f3a0b

SHA1
5082730dd2bd86ed6975e397a146a022906d799a

SHA256
635a8e9b5ca39527e0e545b09caf11eee81e0a39f1998d7ef6de48b624a03e79

SHA512
605f5b983a4df4ba633b9c7be52cc950e81d7b65f1f04c2ead948c223c620cb879dc0c9d814e49a6e588d4717002e94da7d49720fc326b96fb962f8a49cf7cf8

Download Submit
/data/misc/profiles/cur/0/net.dinglisch.android.taskerm/primary.prof

Filesize
11KB

MD5
dd0a270037967177d28c383a1b99201c

SHA1
0add8830d9468a2b52cfd68de45196d9e48cdb76

SHA256
02a5919a7aba30adfaf1afab3450c02ed3df87590a4b1edbabf80ec7816be52c

SHA512
b4997da46ddf975523f53226a0d3fc25d50e5550987846ef741979858d137356f685e5cf007d32dc7508e9797c8442e78c4ccb68bb5d833a039675b7ad31da7c

Download Submit
/data/misc/profiles/cur/0/net.dinglisch.android.taskerm/primary.prof

Filesize
32KB

MD5
5ec1f49bfaf419c0e9b23def03849737

SHA1
402ab8db51cd253576a7b9846ce16da229706dc1

SHA256
4051e47dcb29a34bdfb60a74b5801a5d04784694325906b4d8fba2a9b644c9fb

SHA512
7f0d89fe76ef6d40e91c6c4d5eb600a22a4ff8f060dd3138b694b32a87888b6e6291ef62004600a5451354cc83417595316a0a704036545f81c15a8a77eb90f8

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads