fd99acc504649e8e42687481abbceb71c730f0ab032357d4dc1e95a6ef8bb7ca

Analysis

max time kernel
141s
max time network
150s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
27/03/2025, 20:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fd99acc504649e8e42687481abbceb71c730f0ab032357d4dc1e95a6ef8bb7ca.apk
Size

342KB
MD5

a38e8d70855412b7ece6de603b35ad63
SHA1

92118623c417c7b9c46b99ae71424198327698a8
SHA256

fd99acc504649e8e42687481abbceb71c730f0ab032357d4dc1e95a6ef8bb7ca
SHA512

7fb48ed59df753a79a9f42750d71c5cc5aa9a6bca976b83ba72add9ddec1fb50c799b21e874d111bfb414635b1e7f6e9d388867d679a29597f0b912a105c56a4
SSDEEP

6144:HIOn1UQtZOfKr3V33gmAIAM+WubYnmNMbwy9UXKfgWUGl:HImpOfKrF33pdAgubQmNM/SuUC

Score

6^/10

discovery impact

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.emc.pdf

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.emc.pdf

com.emc.pdf
1⤵
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
PID:4789

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact