9916781c9c5ed9adbe8fdc23bb2344e9123592762013777efb70533feebff9ae | Triage

Analysis

max time kernel
149s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
24/03/2025, 04:33

Sharing

Report Analysis Logs

General

Target

fnaf d lèuxe.apk
Size

534KB
MD5

a48c7f94408611a29be4d384ccece00a
SHA1

443b661e777e8ad5f4839eb52a8999110a222ec0
SHA256

9916781c9c5ed9adbe8fdc23bb2344e9123592762013777efb70533feebff9ae
SHA512

a3d00dfd5bee1332009de2d8eb67d4e854230288d23e1b10e1779f98ad1d290fe384e152f1c60b1494a83612a1c98002f8f2f47b1ebfe8a6837d2ce640344f80
SSDEEP

12288:NcVS3E28sccs6iDsGJsOoF5GA6yaaJjRH6+O//n3tKpSsM+1HA+9:NOS3E28Xcs6iAGJ2p7ayN6+ONjstgS

Score

7^/10

collection impact privilege_escalation

Malware Config

Signatures

Reads the contacts stored on the device. 1 TTPs 1 IoCs

Contact List

description	ioc	Process
URI accessed for read	content://com.android.contacts/data/phones	com.elite

Tries to add a device administrator. 2 TTPs 1 IoCs

privilege_escalation impact

Device Administrator Permissions

Account Access Removal

description	ioc	Process
Intent action	android.app.action.ADD_DEVICE_ADMIN	com.elite

com.elite
1⤵
- Reads the contacts stored on the device.
- Tries to add a device administrator.
PID:4751

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Device Administrator Permissions

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Protected User Data

Contact List

Command and Control

Exfiltration

Impact

Account Access Removal

Replay Monitor

Loading Replay Monitor...

Downloads