Analysis
-
max time kernel
6s -
max time network
151s -
platform
android-11_x64 -
resource
android-x64-arm64-20240910-en -
resource tags
-
submitted
28/03/2025, 22:11
General
-
Target
2d4c4afa385e7d3d0599198f7a1212bdd5bcd7b3e24ebf2e2d5d162728a9b50a.apk
-
Size
3.6MB
-
MD5
689813313cff961a95d9da8003da5013
-
SHA1
092ffd924b34e150107fd4fe893c344a71de1a5b
-
SHA256
2d4c4afa385e7d3d0599198f7a1212bdd5bcd7b3e24ebf2e2d5d162728a9b50a
-
SHA512
e0504ca2b472f5317d3806636ef3a85ffbac53380ff2d368f00b335228e60914732c55f146fefda7f39b2dd79ff31158719ef5c3fc52272edca4d765a2a340be
-
SSDEEP
49152:FApGv7d2ZrNE720GG2thBPsDyGC0eD5NZY+jjB0gYD2K1eNqJqL:Zd2ZrNE7RuhiDFDe3ZseqqL
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
Processes
-
com.testtest.seqiwegrty1⤵
- Loads dropped Dex/Jar
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Requests disabling of battery optimizations (often used to enable hiding in the background).
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
638B
MD591b036e9f2281d63e45cf74bed031bdb
SHA1bf02ef72e1dc3a437c41390e24c2311156949a7d
SHA2562e476196c54a8e84fe3e6d6a7f67cd8d42226dcb54a8fc05d42fe6d45e6addaf
SHA5128c4d2ab48f62567d0de1e2c0a2eaad24eecad9398b581fca7091305a3d62804026fc344ceaca1e0fec132ebec572088912416c5174aeb79607ab63659781c8ba
-
Filesize
12KB
MD5bdf3529e80318eb14e53a5bf3720c10d
SHA125c9ace4b1af6e80ebb2572345972c56505969ba
SHA256bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
SHA51248b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b