Analysis
-
max time kernel
6s -
max time network
151s -
platform
android-9_x86 -
resource
android-x86-arm-20240910-en -
resource tags
-
submitted
28/03/2025, 22:11
General
-
Target
2d4c4afa385e7d3d0599198f7a1212bdd5bcd7b3e24ebf2e2d5d162728a9b50a.apk
-
Size
3.6MB
-
MD5
689813313cff961a95d9da8003da5013
-
SHA1
092ffd924b34e150107fd4fe893c344a71de1a5b
-
SHA256
2d4c4afa385e7d3d0599198f7a1212bdd5bcd7b3e24ebf2e2d5d162728a9b50a
-
SHA512
e0504ca2b472f5317d3806636ef3a85ffbac53380ff2d368f00b335228e60914732c55f146fefda7f39b2dd79ff31158719ef5c3fc52272edca4d765a2a340be
-
SSDEEP
49152:FApGv7d2ZrNE720GG2thBPsDyGC0eD5NZY+jjB0gYD2K1eNqJqL:Zd2ZrNE7RuhiDFDe3ZseqqL
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Reads information about phone network operator. 1 TTPs
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
com.testtest.seqiwegrty1⤵
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Registers a broadcast receiver at runtime (usually for listening for system events)
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
638B
MD5b36229d6e5a841545c7f8382ec3284cf
SHA19e23654c6594467455e41202f6a09e62c08fd117
SHA256f00a94292a6b06dc1d1d08f5567c496366fa430c33135b9c8c93d2a17c4b4530
SHA51251ef15dfd9968afd7e9193236822ce5ca4e29c9e55231f832f89bbd115f5c4ca33464b19eddbe47d4141cebdc261d6f83442a81fa6a1aedab44b76b4b43ce4a1