e4e97090e9fd6cc3d321cee5799efd1806b5d8a9dea7c4872044057eb1c486ff | Triage

Sharing

General

Target

e4e97090e9fd6cc3d321cee5799efd1806b5d8a9dea7c4872044057eb1c486ff.unknown
Size

340KB
Sample

250327-ry24msvrw8
MD5

f48122e9f4333ba3bb77fac869043420
SHA1

02cc4cd5fbe40983ce084b9fa92d75c1d3da4954
SHA256

e4e97090e9fd6cc3d321cee5799efd1806b5d8a9dea7c4872044057eb1c486ff
SHA512

fe6b244a9b84ec76ec8c0c28ae0b30ebd8de4c5aa43a9b6269b1d7358d8ec5c0a8fc8bd99bdbf0f71d2e68fc08e71882731b15eb4141109b3de5fd4b7d90e791
SSDEEP

6144:AVknR9v8MnFle/shzyqEZd5KDixU5YBqukraN5jGh2fQzwETloY:AoUMFlzhzw50iEKKaNWFvTSY

Score

8^/10

android defense_evasion discovery evasion stealth trojan

Malware Config

Targets

- Target
  
  e4e97090e9fd6cc3d321cee5799efd1806b5d8a9dea7c4872044057eb1c486ff.unknown
- Size
  
  340KB
- MD5
  
  f48122e9f4333ba3bb77fac869043420
- SHA1
  
  02cc4cd5fbe40983ce084b9fa92d75c1d3da4954
- SHA256
  
  e4e97090e9fd6cc3d321cee5799efd1806b5d8a9dea7c4872044057eb1c486ff
- SHA512
  
  fe6b244a9b84ec76ec8c0c28ae0b30ebd8de4c5aa43a9b6269b1d7358d8ec5c0a8fc8bd99bdbf0f71d2e68fc08e71882731b15eb4141109b3de5fd4b7d90e791
- SSDEEP
  
  6144:AVknR9v8MnFle/shzyqEZd5KDixU5YBqukraN5jGh2fQzwETloY:AoUMFlzhzw50iEKKaNWFvTSY
Score

8^/10

defense_evasion discovery evasion stealth trojan
- Checks if the Android device is rooted.
  defense_evasion
- Removes its main activity from the application launcher
  stealth trojan evasion
- Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
- Queries information about active data network
  discovery
behavioral1

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Suppress Application Icon

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryevasionstealthtrojan