3997dd1b42fe1ea1112846ffe458261091873ce6928e7a1ac53c8974482877a7

Analysis

max time kernel
46s
max time network
150s
platform
android-9_x86
resource
android-x86-arm-20240910-en
resource tags

arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
submitted
21/03/2025, 08:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fb527bf32dcc29579d1a851ef4b2c8f8 (1).apk
Size

14.4MB
MD5

fb527bf32dcc29579d1a851ef4b2c8f8
SHA1

fa83fd988fc3bf436ffb4862fa599a131182cf41
SHA256

3997dd1b42fe1ea1112846ffe458261091873ce6928e7a1ac53c8974482877a7
SHA512

5488bf8ad7a6bb16722b8aff47802f4492c9e691ea7edeca1e7e46ec0fc7d96b88345bced9907f23172567fa94475b4d28d9c7d912eaaa3fa242c471c885cfe9
SSDEEP

393216:GreEjMJ9dqCTZdxKz6EeCwdL7NTS0IJ9WAa6ZlTPQ:GqwW9dVcz6wwx9S0IJ9W4TPQ

Score

6^/10

defense_evasion

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Requests allowing to install additional applications from unknown sources. 1 TTPs 1 IoCs

defense_evasion

Code Signing Policy Modification

T1632.001

description	ioc	Process
Intent action	android.settings.MANAGE_UNKNOWN_APP_SOURCES	com.irora.doubleapk

Requests dangerous framework permissions 14 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

com.irora.doubleapk
1⤵
- Requests allowing to install additional applications from unknown sources.
PID:4358

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1632

Code Signing Policy Modification

T1632.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.irora.doubleapk/files/profileInstalled

Filesize
24B

MD5
611787aefe77c1da1497dda70745c2bd

SHA1
6a12a1e6dbde34627776619ffa9a7fcc040b2299

SHA256
e2ed6e3a97ce0911645d46963351d7190e8da150bf0120f1d425c15ddd60930c

SHA512
b3d70af2dca1bc0efb47feb4e46bccb7f3e8fe39ea93727509df2438e5a7cb3bb32500a1c428779c00af4234006b9f157bbbb896a5aa3f4ffe5b6ed83d1d3972

Download Submit
/storage/emulated/0/Android/data/com.irora.doubleapk/files/app.apk

Filesize
11.8MB

MD5
11e1579e21384634c5d0719d00fddd52

SHA1
f3129a33af11c6f057adcb6e283cc4b113f95041

SHA256
0032143d12ed868f56750157ccba791292b9655af638af790a551a4e95fcbb9e

SHA512
c137717d0aedc929faf85939d43bec0a666ea5eb48437f3137e2f8e0ac045ef498694b0c50aca544aa5ad7993cafa42c15ca72a9ade069803dd5a12fbe951da9

Download Submit