8e50eaa8ce2003d20c1f365a0b10357dc7df10c497257cb6647e2c4d9e2b5072

Analysis

max time kernel
8s
max time network
138s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
27-01-2025 02:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

adl.apk
Size

3.2MB
MD5

3b371c5b773359cf03949563caac51db
SHA1

13d491930bc5bbde8d395096b8a324cfff17de2e
SHA256

8e50eaa8ce2003d20c1f365a0b10357dc7df10c497257cb6647e2c4d9e2b5072
SHA512

b5874a0305a4e4cddaa73244123b905115d6c7b29f86cf6ccc4e88ba5acdcf563cf2231dd7783c401081c7566a553fe754c201d55cc3d62a46e3a6c3fc221c01
SSDEEP

98304:pabIskjguTIFQQzmNS5odWnvScSnUrhst9:wbVkjhJQzmNSGW6D

Score

6^/10

discovery impact

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.ss403.app

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.ss403.app

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.ss403.app

com.ss403.app
1⤵
- Acquires the wake lock
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
PID:4613

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact