40e0205583d5d8698229727f95d4c98c369f839806293cdf363bd7106a4f8c62

Analysis

max time kernel
148s
max time network
170s
platform
android-9_x86
resource
android-x86-arm-20240910-en
resource tags

arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
submitted
28/03/2025, 22:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

40e0205583d5d8698229727f95d4c98c369f839806293cdf363bd7106a4f8c62.apk
Size

2.0MB
MD5

3218cd4bccaa76c664356d4434748df5
SHA1

467c93f14777f7b7dc5e0db13004a063c999bf91
SHA256

40e0205583d5d8698229727f95d4c98c369f839806293cdf363bd7106a4f8c62
SHA512

b518ae3ed8dbb0f160b2f1d59aa7dd85bb34fa75f97642374ed71e2f66379ca5a0078a5e8416083a8a3b85a31518c3d2fce324e1a77e9667bec8b5089290fb76
SSDEEP

49152:8xgSwaM9kdMsTwFzTF25/bl0QuP1VMl77:haMyddwdK6H4l77

Score

6^/10

collection impact

Malware Config

Signatures

Requests changing the default SMS application. 2 TTPs 1 IoCs

collection impact

SMS Messages

T1636.004

SMS Control

T1582

description	ioc	Process
Intent action	android.provider.Telephony.ACTION_CHANGE_DEFAULT	com.example.freeloki

com.example.freeloki
1⤵
- Requests changing the default SMS application.
PID:4395

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Protected User Data

T1636

SMS Messages

T1636.004

Command and Control

Exfiltration

Impact