Analysis
-
max time kernel
118s -
max time network
135s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
14-01-2025 18:22
General
-
Target
com-mod-tasker-mod-apk-v6-4-9-beta-5405.apk
-
Size
40.1MB
-
MD5
a3e67dd6627319f1bf57f22d47bd779e
-
SHA1
785d513dc4be4cfa90f41ad18e6935ffe8d5a2e3
-
SHA256
d14247ea058ba1c1e625370d00dcfc41afd69275065be576abb008936dc87db2
-
SHA512
7fe2023bebbaef5fc57001430f20483b127480b9342d7edf0866b08f65eb10e6b046f782e312cf6e73fd04324be311b74d80f2eb39c95a375c9293b66d1324ff
-
SSDEEP
786432:clLgf64/Szm6qRr8PwCQ7I+j7P3AAUsYi2IRSPzOdmdljlVWgXijsIJe:clgd/SSCPoD7PQALX2I4Pzsmd4gSI8e
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
net.dinglisch.android.taskerm1⤵
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries the mobile country code (MCC)
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
100B
MD5278bdd5c02bef60e2297398b2f384aaf
SHA12931ff408c4e220394a15cad4b71d87f2ce337a8
SHA25694d17d1f308789636300d7f2def7f66cfbbbfda317884e2dd433ecd857776c9e
SHA512c5bc5914f12fa2e1ffc0c4134290e9ca4728ff1b54468bcd77936b913d544b9691146fe978c33bcddce2eae60320f6c0117b860da6df1e84c0e5c41368d0a205
-
Filesize
214B
MD53f93156cbb926cd23906d89e80f4c780
SHA1b229d9903f1f964d597d79ea230b6bd332c422a7
SHA2563920dcb64bff669d788f8628aa3f839ea48ffd4655ecfbde3a08422781a424bd
SHA5125ead48cfb893c64b4ff45ef09f5fbe4b68b49b69611243e7667ab92f67346bce37176b355631ce66eb00316a0540c972b2e1d45deb41f22de56d34ab694230d9
-
Filesize
24B
MD591f31c6ed9ac012e1bddffc135f5b3d6
SHA1436d6beb2ff5eed3b27332a5f52e123e7076c25a
SHA256111d43c3d83553229f8b82599f1c86850f7e0742fae5eb4710eea1f715dc075d
SHA5123c77bc306cd7efb8d48d4d6ee50fb61b0d40f08131116c9baf9d5f3e9b266ebe98c86ed5531b7fea9c36e9423e54d4282671e3debaa511a885dc4c227370e276
-
Filesize
8B
MD58728b79a080d31b709cb22c1262e83bc
SHA120de5114be67781992bb225de1c857c3c9e074b8
SHA256735d41887af4907f53cd26e558cdf19c371eea5cdcaf28e11b25364bf1302cac
SHA51244244b82c3c6d6c3c7d3ca86820354377325c95a42bd7862ec6c794385bb3612fa0cf16158492b4b93bd3849d723ad73217053bd647beedef7ddf52ee4d7fb83
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5749f4d5c3c9725a0f516e19ddcd2e872
SHA1450247a6e0197c5545765bed0d9d8220f72c461f
SHA2568d6315b1af0ee6493b6c31a489927dc8f52e5b76dcf4a746521f7a206e1b938c
SHA51202b59898964a9b96310e99ac11b31924f0a4ef0251dfd4150104ee63f3c6a4c69f9cc711b76c1a539edda902aba9163167a1b4cf7a2deeeca94a468404f3b15f
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD50956afa3197de671955ad50f7d25af49
SHA163b8053bf61b7ed0049c1745849bd9f1a2549dc3
SHA256e1df36703146b03701655432112408f8cf632051b43d1df77683a5f107a8bada
SHA512f6a13519916eadc62249d17664f40aecda28e358e352b4055236a1ab3f9c643fa98b820262019d61d2018ffb55d0baa8e90c55b1fb886d58fa54b3ca98baa2cb
-
Filesize
108KB
MD528a9ccc068481fa819a5a91adfa2f864
SHA18321e482f8bdc584f78ab9e6d8444678ea96aba9
SHA256b7f1fb9d187bd44a68ddc735b49d3de12cab989f230500537dc28c32dea005fd
SHA5125ded81df2f80ba0a29ff65dbf5095b037ff5e4d7cbd8182186f78d70c67dd9e57fac29140408f47c65cf0df248b7a26b357ffb935629cff7f3004810b2ec1511
-
Filesize
33KB
MD561e87816681b2f49df819a5ed75dca3a
SHA1badea389f854b40106222edebf3febd377512c1e
SHA25663620a10ba9d10f20d67c26eaefae8aafb0cafdbd3b44b598e5ac6cd11be93fd
SHA5127eac736c720b77bb4333acfd865d21d7aed7a2328ba667b098980a99a76063ba64f772664901cc90b96843c46859f90c7be728e3970b72850330424c348d3eae
-
Filesize
11KB
MD5da4c0c36ac84311528ae780d3c1f3204
SHA132380c6e2171c9d1bda2950e433e172840764da8
SHA25678cb60e400f4d74147c6e2bbd63afd0f83627f4c801582b6d644b46f111be388
SHA512a6ebf2a1aac71ae2d53d27e81eeeec227782923d37668e6d2ea2c1b598acf9e68f6f2f67563cd137afd0e43007e983ab37bc4ea4ef603a2d99cbabb9fa1482ac
-
Filesize
23KB
MD5d939fa795c53c85988d4e23ea87dae3f
SHA1dd86d489940fa2a2ff4d2583bf54719b4372d097
SHA256aef8b7168b55b5f27f8f233b2fc758723c7c8721af6e4c03d33ba0b2b3f85d73
SHA512078a6c11cc8e321373328183a8a0d2cc99605e9e197db0e60bc14a954050f0c7bf2b7e5879226a09879a6809ebc235ecac213044c7da33a1e4cd2879c3715972