Analysis
-
max time kernel
135s -
max time network
119s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
14-01-2025 15:01
General
-
Target
Tasker_6.4.9-beta_arm64-v8a_armeabi-v7a_x86_x86_64_mod_apkdone.apk
-
Size
40.1MB
-
MD5
a3e67dd6627319f1bf57f22d47bd779e
-
SHA1
785d513dc4be4cfa90f41ad18e6935ffe8d5a2e3
-
SHA256
d14247ea058ba1c1e625370d00dcfc41afd69275065be576abb008936dc87db2
-
SHA512
7fe2023bebbaef5fc57001430f20483b127480b9342d7edf0866b08f65eb10e6b046f782e312cf6e73fd04324be311b74d80f2eb39c95a375c9293b66d1324ff
-
SSDEEP
786432:clLgf64/Szm6qRr8PwCQ7I+j7P3AAUsYi2IRSPzOdmdljlVWgXijsIJe:clgd/SSCPoD7PQALX2I4Pzsmd4gSI8e
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
net.dinglisch.android.taskerm1⤵
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries the mobile country code (MCC)
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
-
sh2⤵
-
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
214B
MD5af914633b89cd22824f52c1196cac2a7
SHA1394bc9b28acb18e0724b206658400f6bb9e579ab
SHA2567ab91027cdf1c4b73f82a1ea41d9f9d91eabae5b44182619320b61748fb60bd5
SHA5125559788243b1db847c0dd49f94dd56836af3747dc5d2fbc7d1d2e81be0c6826b440e2f5fdc5fe058bfeafb1bb4832df1f2845c45797f5d7b4325797c7128504c
-
Filesize
24B
MD556b6bed5e8238769a9af66562b3aa9c4
SHA182252e9f0a0dffef17ede8f6569ec75944823f72
SHA256f19ddd28a8635ac3b3725fdd581cac782783628645ca1b173855a99b9f71bddc
SHA512534db51197fded3c48c2ff3e255d586162b4ad411eed9794da53e818bd5624b4c9f2e1a90fb0d3f7bb1daba439377ff3aa4cef0aca9e0189dc75f99f2c55b830
-
Filesize
8B
MD5af7ab4540420360abb181b2e88f3d743
SHA1e1b3642bbe08180a3da5db0b7ef02a024d72f3f6
SHA256497628f5928c9254dc59ba357809596c2b75f38e09eae83ad45a5a27afa8b149
SHA5126201e6a1b5cc421d02d7e4d66bade2b41a20cc31ee7e51d88306240200a3d6d9a5044275f9a2dc9fd34b33517b0dac39a24becf3fbf14555dc2a29c2a2172019
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5854985cbc4d8c6e7ec0880d5b6a57bdb
SHA13e4dc753817bd9ea2ce1303d61f5064996080387
SHA25672a515c18eab9c7c512cf68a4664f152bf392678e041de3e3993e64cd9e17e0b
SHA51297023a1bfe694cca63ea7e853cf92f18bc077715d9334018ea8acf6d56e83e4dbc3b40af108f21ef99becddf172130725989bd76d1b1552af78921251b560eff
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD58671114b9909b3e1021002da1002db7a
SHA17584ce426b3c9f0e534691c71f2bad1bbeaa396e
SHA256532d8955bc66ddd779f3e34a9f7977fdf87e8f788504d772c38dbec47e33b218
SHA51284c4e80bb1099859d109a6de52d2b270461cb924c0d732745816e172c42f3b9ae9f1ad7d05d59620e1540ce80fb88c0c43be718920a5504a18b5647e6dff94b4
-
Filesize
108KB
MD53a03e30e81ded8c15b221f3a1d6a9f5f
SHA16e693e096aff676fed23c6e17b58ed3421f769ef
SHA2564a201410d711d2e5f13cef9293e964675c980354b81f070de687f1a3778bb6df
SHA51239cbf79099e654518e532b1d820a2e957d9eecd7f7154a3c49a3daab7653813fe2b5a1c93cf8c198a778b510b135e7ac72f63f790bf11a550b8d9981ab0adebd
-
Filesize
34KB
MD50f9aba623e5e31b139e60f701f14423d
SHA19340376df9f6be6a5d4a89da753e17a075c2e422
SHA256daf15119d0c3c812a7a85cb068c007766ca261d3caed10b13c1cd47484d5bfb7
SHA51256190fd8ce3d7bff78332e41114b5b3bf288e2590bbb372708560c52222b0f74de04dcb1bf4e9a64017cae03d8cd76716717e8750f690ed58acf3ee6b65c5bb8
-
Filesize
45KB
MD5291589d039850c609a1ae2ac2dac071d
SHA1bc54caebc404cdd34e77f8c59000eddc3f054b12
SHA256e6e5ba8c051d1c387fc85ab377e9b2e44edf51d16b6658840e7d205f96902352
SHA512abea0633aba4f030137ab26b00324365e1a27250e891bc61be4abeae7ed4aec5528961972c0f39a84a88236888c9893b965026dfce88b8f9c3f31880163aedb9
-
Filesize
11KB
MD5da4c0c36ac84311528ae780d3c1f3204
SHA132380c6e2171c9d1bda2950e433e172840764da8
SHA25678cb60e400f4d74147c6e2bbd63afd0f83627f4c801582b6d644b46f111be388
SHA512a6ebf2a1aac71ae2d53d27e81eeeec227782923d37668e6d2ea2c1b598acf9e68f6f2f67563cd137afd0e43007e983ab37bc4ea4ef603a2d99cbabb9fa1482ac
-
Filesize
23KB
MD5713a9f7d77b8f77e3f444516d31003de
SHA114e31aefbd0d19ebf36b7e257460c5cdf88f2039
SHA2564460bb42e009bb9b3f9dab9958fec83f63e2cb4617d2422c4fabf2b91a380459
SHA512dc4f4c306d6e3d096875564f54b7045847e93b1b7f627fbf542f4e52a095ec0cfc8a3abb8b7be418a22854ee8523f2059a634aaa56f2323e19445832b3ba3bf9