Analysis
-
max time kernel
70s -
max time network
154s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
17-01-2025 00:48
Behavioral task
behavioral1
Sample
TASK-MANAGER.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
TASK-MANAGER.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
TASK-MANAGER.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
TASK-MANAGER.apk
-
Size
256KB
-
MD5
aff6bce844a656890e3a647a8871c479
-
SHA1
070c319ac871d9bd63a6af562bd8e5b237e01acf
-
SHA256
ab5d91a02f508e5e0e9567e1558ce1e006c0e30a6b432bef72842a1adebffbff
-
SHA512
c7e7b41fc9bcda5fb1c4741bc7ece6d6714265e06b3835a2c307a1a1d279ba109f91d762008fb672f3a90e78cac121163424569f8d6f08f20dcecc0d2f5e59c8
-
SSDEEP
6144:vie8HiRem77eyFBPxoLZ7ILWFDPLnQ/9UNPIDdjQXvhuN5DuUuF:vi7HiRh6CoV08nI9UNADlQ/h6aBF
Malware Config
Signatures
-
pid Process 4208 com.etechd.l3mon -
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.etechd.l3mon -
Requests accessing notifications (often used to intercept notifications before users become aware). 1 TTPs 1 IoCs
description ioc Process Intent action android.settings.ACTION_NOTIFICATION_LISTENER_SETTINGS com.etechd.l3mon