bd6bfd87d76aea53c837cc6d3507e1221960e6e1a352f268f9e4d4e60d9e06a2 | Triage

Analysis

max time kernel
599s
max time network
605s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
02/03/2025, 19:14

Sharing

Report Analysis Logs

General

Target

VIRUS.apk
Size

599KB
MD5

49dbea297b3f46b57d13c7eb0d3474ae
SHA1

2b74b29cdf872155a58975bbc10cba901b14c312
SHA256

bd6bfd87d76aea53c837cc6d3507e1221960e6e1a352f268f9e4d4e60d9e06a2
SHA512

272a088ed13f28cb054f91b8a2734df50d9b45d08a4839145504a5a25b09bb5f3761e8590d36c16ded29abded46b697ca530343346e90e542ed0636ee236afe1
SSDEEP

12288:pcVS3EVqPlR6i0Ci3jM34D9bwXvWp8FAup8q5lw4Lt:pOS3EW6i0C+M3Sb8C8FZpnLt

Score

7^/10

collection impact privilege_escalation

Malware Config

Signatures

Reads the contacts stored on the device. 1 TTPs 1 IoCs

Contact List

description	ioc	Process
URI accessed for read	content://com.android.contacts/data/phones	com.elite6

Tries to add a device administrator. 2 TTPs 1 IoCs

privilege_escalation impact

Device Administrator Permissions

Account Access Removal

description	ioc	Process
Intent action	android.app.action.ADD_DEVICE_ADMIN	com.elite6

com.elite6
1⤵
- Reads the contacts stored on the device.
- Tries to add a device administrator.
PID:4631

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Device Administrator Permissions

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Protected User Data

Contact List

Command and Control

Exfiltration

Impact

Account Access Removal

Replay Monitor

Loading Replay Monitor...

Downloads