cd5670a1f934f65acb6b973d40a1feac3effc8e038374f7f244d50f7c7adab9f

Analysis

max time kernel
6s
max time network
149s
platform
android-9_x86
resource
android-x86-arm-20240910-en
resource tags

arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
submitted
27/03/2025, 08:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cd5670a1f934f65acb6b973d40a1feac3effc8e038374f7f244d50f7c7adab9f.apk
Size

506KB
MD5

1225ebfc2dcd343671c4e7812423aa3a
SHA1

faf56d8d4a1e8fc406176d21d337dfbfd7240381
SHA256

cd5670a1f934f65acb6b973d40a1feac3effc8e038374f7f244d50f7c7adab9f
SHA512

920af65868a9b5772f5d53b0200fbf74409faf9f03860ce1f130b3e1586beb372c0f08abe339c90f72a5904a97f1be4447964ce137ac4978d51336a63ff75eec
SSDEEP

12288:IjNfteRwDoVHMT0x//h2hSAFr5ofjHbOMGVlxtRtTl1iZyVsM7iw:QNywhTU/hMSAR5oLSM0iw

Score

8^/10

defense_evasion discovery evasion persistence stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
4339	com.intensive.sound

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.intensive.sound

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

defense_evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.intensive.sound

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.intensive.sound

com.intensive.sound
1⤵
- Removes its main activity from the application launcher
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about active data network
PID:4339

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Foreground Persistence

T1541

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.intensive.sound/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.intensive.sound/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
2d5d86b8a90d4328943936ae9d6dcb82

SHA1
1fb0d6c1fffdd818c8739cbd116ca12bcfb6b969

SHA256
1c06cc9c2f0bac15f46ddae9bc51b1059547785283b748ee5093a2ae6785d7c9

SHA512
f63446eb67702c0b3dee67e3254248407b890f7d175acd652de91d9bcf42c710c3195f8099971a2fc712d0d4264da882b20f9e0f9e152332983f4babc180a7ca

Download Submit
/data/data/com.intensive.sound/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.intensive.sound/databases/com.google.android.datatransport.events-wal

Filesize
44KB

MD5
c59edd48e05d49a19a0b245c1e1aa6ad

SHA1
acc09f134c13f31064e232def994c533bc638f80

SHA256
b7bf36b1cea959d4ca79c699be9d0fcd23c8497dc8867764d7d40d50b651e50a

SHA512
3ec527f64ba76f94ae132a84fe197ecb386330db333290fcdf3ddb3c47aa07fa9e1d12d7e4236531e28afa04db1c2ac4c28950178883baa2ed924e2a0d3ddbcd

Download Submit
/data/data/com.intensive.sound/files/620f3999-8f53-4cc7-ae62-492c11c7f02f.dat

Filesize
560B

MD5
1feb8ab76fd94a219835da995eee809e

SHA1
f60835e35f2f37a3a53e03c00b52af3b0c71af66

SHA256
fd51bb7780b82a582fd3e3d5b43ba4558ced02eaedff218bf34102dfba6d0f5b

SHA512
ae26e5c4ac784a0a608e27000d2e9d532d1167220d7ed80749e1bdae26adf61ba44e4cc334cb571785a232b2a9779e3f7c309b9f3290d5a829ba20d81939d1ba

Download Submit
/data/data/com.intensive.sound/files/PersistedInstallation4704705305459794621tmp

Filesize
90B

MD5
47b4dd0d8b5077748d7d486ce570fa2b

SHA1
661efe69707145c543c42d0e6916ccab377573ba

SHA256
27ff2c47252fab01279db2b5c0e802a4ad73e8a7699c062d27ba4c6261b557c8

SHA512
cd7c61a1ccb6d41cd3aea598c8d4aaaa500d06083fb557525604a5215af1e499109c34c4b8e3aa8069cdb5353c8a8c23f8fd81456d6bb9cc88e12f373e39be1e

Download Submit
/data/data/com.intensive.sound/files/PersistedInstallation6304662841175757267tmp

Filesize
566B

MD5
a5a04344a76b6469be0b0477df4af175

SHA1
78974b59a22c9b6037fc2eafa2308956f20d8f42

SHA256
c29a4d876c793e0c1c4d10dcbbacc1eabfa21417a0198b3db531f7d1d9157aa7

SHA512
ebcbe9609be660809ea38b52d08f4bc9ff8e7d10510bd4a1a90a6137bd644c37459026e508d6e0d9422476fc8ddb811e2afd80e90d3ffbb7bc4daa20daa8bdc4

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads