4741a9c72551f2ad1eb0dd3d7b8f624137808d302ea78d8e0d9b924b9d79835a | Triage

Analysis

max time kernel
1834384s
max time network
158s
platform
android_x64
resource
android-x64-20230831-en
resource tags

androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system
submitted
07-09-2023 01:49

Sharing

Report Analysis Logs

General

Target

962f63e9a636b8823b9844483f708d52.apk
Size

29KB
MD5

962f63e9a636b8823b9844483f708d52
SHA1

fa026e27245c7c39840cf9c62955c44b67aca7e9
SHA256

4741a9c72551f2ad1eb0dd3d7b8f624137808d302ea78d8e0d9b924b9d79835a
SHA512

ace0b42e3297226159abcd854aa781867160f656f93db72893d3f8b9e7476083b88b7ca562aa12ee0c79937be09ca2ab6f20d9bc3aa4f9edd4fd7d33ebcbb168
SSDEEP

768:k8HA6juqnCGQ37oHMJmUcyFn69clXGj7UYRKgwS:k6AUC5EHMJJWcG4YRRF

Score

8^/10

Malware Config

Signatures

Removes its main activity from the application launcher 1 IoCs
stealth trojan

Processes:

package.name.suffix

pid process

4841 package.name.suffix
Legitimate hosting services abused for malware hosting/C2 1 TTPs

Web Service
T1102

package.name.suffix
1⤵
- Removes its main activity from the application launcher
PID:4841

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...