4d89afb5e33ae85630d73d0b3d9765f523b9e0b6e1e80e4ce50780ea486b8315 | Triage

Analysis

max time kernel
116s
max time network
155s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
18/02/2025, 02:32

Sharing

Report Analysis Logs

General

Target

4d89afb5e33ae85630d73d0b3d9765f523b9e0b6e1e80e4ce50780ea486b8315.apk
Size

267KB
MD5

46fd7ae90adad17163e51191b3c3704a
SHA1

1e111450b5b292d9d192513000f9ffb381709296
SHA256

4d89afb5e33ae85630d73d0b3d9765f523b9e0b6e1e80e4ce50780ea486b8315
SHA512

5acda92aa8ed43d8b5bb6f7861e08e138a4816cc7459faf5399e2b093fc5b9724101e25f25c7d9a3877386eb607ff9ae279156ebeae0227c5220019e42de100b
SSDEEP

6144:AE+ohBRPxdh+0GohVa8g1wH9U75ENc7LNP900:AE+ofR119VXgGHyd9x

Score

8^/10

collection credential_access evasion impact stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

pid	Process
4955	com.etechd.l3mon

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.etechd.l3mon

com.etechd.l3mon
1⤵
- Removes its main activity from the application launcher
- Obtains sensitive information copied to the device clipboard
PID:4955

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Suppress Application Icon

Credential Access

Clipboard Data

Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Replay Monitor

Loading Replay Monitor...

Downloads