c90668fb20198cea2f2c834bc1c75382ddfa75c01972254e443c590cda14ab33 | Triage

Resubmissions

12/04/2025, 11:30

250412-nl53zstvev 10

24/03/2025, 04:38

250324-e9j1zs1ly3 10

Analysis

max time kernel
149s
max time network
157s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
24/03/2025, 04:38

Sharing

Report Analysis Logs

General

Target

talking ginger 2stingray .apk
Size

545KB
MD5

2236952a30273c1f0a4a071d652bfcae
SHA1

0fd0f260b4d03582ef3c53f858b7d02ab630e299
SHA256

c90668fb20198cea2f2c834bc1c75382ddfa75c01972254e443c590cda14ab33
SHA512

fcc929c2167009fc1b24505e7433fd93b9400274d493f72edf2cd281e491fc09484e5d1ccc4762d1af474c6d6a5a45e1227bb9070790f0b6352b546a96875f80
SSDEEP

12288:JjRH6+O//n3tKpSsM+1HA+ws3QcMBIA0LFoJBbVXOwXrDny0:JN6+ONjstgIgl/2FQ8wbry0

Score

7^/10

collection impact privilege_escalation

Malware Config

Signatures

Reads the contacts stored on the device. 1 TTPs 1 IoCs

Contact List

description	ioc	Process
URI accessed for read	content://com.android.contacts/data/phones	com.nevirua1447

Tries to add a device administrator. 2 TTPs 1 IoCs

privilege_escalation impact

Device Administrator Permissions

Account Access Removal

description	ioc	Process
Intent action	android.app.action.ADD_DEVICE_ADMIN	com.nevirua1447

com.nevirua1447
1⤵
- Reads the contacts stored on the device.
- Tries to add a device administrator.
PID:4708

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Device Administrator Permissions

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Protected User Data

Contact List

Command and Control

Exfiltration

Impact

Account Access Removal

Replay Monitor

Loading Replay Monitor...

Downloads