Analysis
-
max time kernel
2772507s -
max time network
150s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
23-11-2022 15:30
Static task
static1
Behavioral task
behavioral1
Sample
987900ec1c2c843ab46a492af73b8bf6855760fa988d65097bdf0b51457ac9c1.apk
Resource
android-x86-arm-20220823-en
General
-
Target
987900ec1c2c843ab46a492af73b8bf6855760fa988d65097bdf0b51457ac9c1.apk
-
Size
11.6MB
-
MD5
7392eb2a32eedefdd12d54fa016607be
-
SHA1
26d7a49a0bfa967c68010a73c2d37fe070546e06
-
SHA256
987900ec1c2c843ab46a492af73b8bf6855760fa988d65097bdf0b51457ac9c1
-
SHA512
738c8ef600016b8ba9e0e646338bb870d9d16e4ef3c4a9c41a561281166f9d62b063d02559073b8ddf375721be350344afe738734e291250d4990fbc19f9fdfb
-
SSDEEP
196608:rFIkfDR6bX0kiVNizo/MNYQxiQWOBbEUilRSA14Pk75lUIFu90zfvVe0OFz1K5WR:rFIEDR1pVNizBYQxiQWOmPbHVDzHe1KU
Malware Config
Signatures
-
Checks Android system properties for emulator presence. 2 IoCs
Processes:
com.shuame.mobile.tvdescription ioc process Accessed system property key: ro.product.name com.shuame.mobile.tv Accessed system property key: ro.hardware com.shuame.mobile.tv -
Reads information about phone network operator.
Processes
-
com.shuame.mobile.tv1⤵
- Checks Android system properties for emulator presence.
PID:4018 -
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq2⤵PID:4074
-
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq2⤵PID:4096
-
/system/bin/df2⤵PID:4272
-
/system/bin/df2⤵PID:4285
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.0MB
MD5bc6c1234f315b50a7883cbc9f8041a22
SHA1f57c5db795dfb323c157bad2517199ffe3c9f135
SHA256f765c41eae0a56c67574ee191371fe95de287d5edb3e527d465fd973c351b4cf
SHA51271a645ca0f0322fe657328f7352614c55cc4f42583337129d15cf23987f460ecec927b31869b287dd4137bdbf6bb25cc7cb6780095c7712bf1f19c41061ad01c
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
524B
MD5c48a9bed60d497a2b9b65318174a6beb
SHA15ddd370b4f6b901695451278a5fb044e20da5a5a
SHA2561a15e2cbefe4e369810a8ce73c5d3f602a2b8940e160f4c8061b59930ba514e8
SHA512ac23b44653e98f4b1132e815cfdf029f0b1bf02f48b820a92b123ce62bdb5c30008b0a59aa15e5e6d737ec891d228cabc10f5a32c203526d7cfcdd3098044913
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
60KB
MD505f42474f51168d15287878504aea233
SHA167eee1278d1b881cf449b159d744eff98e5f30b8
SHA256f573d9be5a3f42cdbaa15990223ae5ea80f96b9f99c05384e51cc752c2c6488e
SHA512a6adc92e18ebe75026f3fc577604f29f76f91c4a68b8e81fec2fcb91568d39e2882595cbefaa3b7341ada294ee62e9912049c96e491ca454364f659e05430e7d
-
Filesize
165B
MD566afd0b8702ae7c25b2364e876e92c9a
SHA1b727d46dbe9f80191d9d7313d88c3386ee5ec894
SHA25683f3210a447c310801f163eb03ab86ba8db4a1ac864a7418d32c1fdf6fcfa2ed
SHA512d40420e33e7916ba187748dd3c94c7bc1a1cbaa84cea93ecc4f08beb414c3e5cbbdcd9196afa0743af246cea234ac3d6c4aa3f6ccbec467eea83efd76615d5ec
-
Filesize
232B
MD588f4c6be419de1859be618e97fdf89a4
SHA19c0df578547592f4251009fe198f0a6fa62bb1f7
SHA25689caf3b7d33df8610b73bf169290a9782ebd5af9e3065d91d3d68af0a29cd5b2
SHA512a8629298da86eb0deb86b8b528bdfbc8465f0f06d57b3489cec0cd7a073b562979b63f7d875051556f26be0d3772700abbabf701954b386047e4bacdd22169ce
-
Filesize
297B
MD5f174ea918390d024d33359a23c871546
SHA10593c8c155cdd49315eccc32e4322053a46529cb
SHA256da734ee83d827bfb2517dc1a90709fcc0f4f1062e78678afd4f96283c624d584
SHA512ac89d79dc97a888e21ecb0201248d36b050a359e301163343e6b084f421548495e9596503a8080f37096d1dedcfb6c7277fc91e3e95f4f616d66795f8ef664bf
-
Filesize
349B
MD59ef96487b13b4c1b3311de09a0c534f6
SHA116f3badefb8d0a02ed422745b9008bb0851f44f3
SHA25658add2a81426a98d66456f2fd66cc4cf7c4857a2d68afb856925b3e83136bf0b
SHA5129a4a98dcba208aff5a4e05b4cc880e74b735f35648c0ec75ff54fe723155b7ae7c62747a85d6d5b653da302b32236a2f6da91d9ca7587fd822d3da252cc1c795
-
Filesize
394B
MD5ea636dc2741360719ecf4e3574f309b7
SHA14d7f3dd21586989b60899d00a6bc44473efe4bb0
SHA2566439b253f57746f38ed060a199a481dbe513645252b90eb111bc35ef6ff9ae26
SHA5127035004081ca7bd4e8abb30279eff0f308e4d64176354aa8f2eacf8a7cc3af383a60ba60f96a5a2d3cec9bbc44b0be0f742b55e46f96123243054cf6b8f7dac9
-
Filesize
458B
MD5fee34cb621a4f284dbdf8103c3a36f63
SHA19d147e74b919240a63a6dfda2cdcc0db6db0f92e
SHA256832b54a45a033d0fff56e61f43d540e2a562121955e4913032dce278b8f1b454
SHA512e58678ac395fc6583da72388ac45048569a42bf8eac1181dd7ee59b5784fc7a017ba030d4a52fbc6fd93631581970e029382d2c51e6da1c73ce462c10ab948b9