40e158e077a3bd18e57df47a70d553668365a61195cb3233eca09f21a4abcf90 | Triage

Resubmissions

24/02/2025, 18:37

250224-w9xqhsxqy8 10

24/02/2025, 18:24

250224-w2dmnsxmt2 10

14/03/2024, 20:10

240314-yxnyysdh3t 10

Analysis

max time kernel
209s
max time network
203s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
24/02/2025, 18:24

Sharing

Report Analysis Logs

General

Target

Angry birds transformers.apk
Size

573KB
MD5

237d1bb819efac39957685ed58f1ecbc
SHA1

c87509d23b607c5bfea367efdd1066ab39ac5770
SHA256

40e158e077a3bd18e57df47a70d553668365a61195cb3233eca09f21a4abcf90
SHA512

6dab4c005152e2a1c0889bff78bcb1fe24593c4eb43b380b633b09af9d40e06618d07b689bf177b1735c117d272955654648409db83c66a747d813d37137d1a4
SSDEEP

12288:gjRH6+O//n3tKpSsM+1HA+Aslv8rScVS3EVqPlR6i0Ci3jM34D9KVs:gN6+ONjstgUd8+OS3EW6i0C+M3Sb

Score

7^/10

collection impact privilege_escalation

Malware Config

Signatures

Reads the contacts stored on the device. 1 TTPs 1 IoCs

Contact List

description	ioc	Process
URI accessed for read	content://com.android.contacts/data/phones	com.rovio.angrybirdstransformers

Tries to add a device administrator. 2 TTPs 1 IoCs

privilege_escalation impact

Device Administrator Permissions

Account Access Removal

description	ioc	Process
Intent action	android.app.action.ADD_DEVICE_ADMIN	com.rovio.angrybirdstransformers

com.rovio.angrybirdstransformers
1⤵
- Reads the contacts stored on the device.
- Tries to add a device administrator.
PID:4270

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Device Administrator Permissions

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Protected User Data

Contact List

Command and Control

Exfiltration

Impact

Account Access Removal

Replay Monitor

Loading Replay Monitor...

Downloads