2e3f5b2d83c3844d534e4ec9481016c2acfa26813b54471a26003c34ef26f11b

Analysis

max time kernel
148s
max time network
151s
platform
android-10_x64
resource
android-x64-20240910-en
resource tags

arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system
submitted
24/03/2025, 04:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2e3f5b2d83c3844d534e4ec9481016c2acfa26813b54471a26003c34ef26f11b.apk
Size

2.0MB
MD5

f918a04746221391097df07f678dfe1c
SHA1

90f3cb9df315c926fb42c7f0353ed664f00abb8c
SHA256

2e3f5b2d83c3844d534e4ec9481016c2acfa26813b54471a26003c34ef26f11b
SHA512

514c7c0a5a6709f5c492f5d76e20205643d23b903c078d01f6ceced61907b35f5ed7ae0f55527280fa3695428966298a64c26422111766c431d6f44c88c0a589
SSDEEP

24576:Z9pTK6uR0fZ7Q1eY8sl5pKBCI7WXkKF8scWVKUOZOUvBZRvL34ShdHplRaV5HKWT:FduR0fMSSKnyUNWjRCBZfHEVBKTTply

Score

6^/10

defense_evasion discovery persistence

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.example.dat.a8andoserverx

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

defense_evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.example.dat.a8andoserverx

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.example.dat.a8andoserverx

com.example.dat.a8andoserverx
1⤵
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about active data network
PID:5061

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Foreground Persistence

T1541

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads