Analysis
-
max time kernel
2771697s -
max time network
148s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
23-11-2022 15:30
Static task
static1
Behavioral task
behavioral1
Sample
d147b59fd4b6ce97ae18add1d7bd16fda13306d017b01af5efe80692b2f11a69.apk
Resource
android-x86-arm-20220823-en
General
-
Target
d147b59fd4b6ce97ae18add1d7bd16fda13306d017b01af5efe80692b2f11a69.apk
-
Size
4.4MB
-
MD5
94053d3221d734edde05730158c47bd1
-
SHA1
7645a5ae7f4ec4f1e1845706e0122b9783df766b
-
SHA256
d147b59fd4b6ce97ae18add1d7bd16fda13306d017b01af5efe80692b2f11a69
-
SHA512
f4d144a5c3fad6192b2d906485f16db9263096067fc7cf5c689b14f4104b900caa9a89159627dac2acb6a89fbc469316507b541860d60367d8a15e889c66ecd1
-
SSDEEP
98304:B+07Zw3bQwh1zGJGFCIU9oe0OZk05lt17VqKSGdhd78UIVtojblberJP9CMafwCE:B+aZw3bFPYgCIUOe0OFz1xSqlxjpboVR
Malware Config
Signatures
-
Checks Android system properties for emulator presence. 2 IoCs
Processes:
com.shuame.mobiledescription ioc process Accessed system property key: ro.product.name com.shuame.mobile Accessed system property key: ro.hardware com.shuame.mobile -
Reads information about phone network operator.
Processes
-
com.shuame.mobile1⤵
- Checks Android system properties for emulator presence.
PID:4142 -
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq2⤵PID:4191
-
-
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq2⤵PID:4222
-
-
/system/bin/sh2⤵PID:4318
-
cat /proc/mounts3⤵PID:4336
-
-
-
/system/bin/sh2⤵PID:4436
-
/system/bin/ndk_translation_program_runner_binfmt_misc /data/user/0/com.shuame.mobile/busybox /data/user/0/com.shuame.mobile/busybox cat /proc/mounts3⤵PID:4456
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.0MB
MD5bc6c1234f315b50a7883cbc9f8041a22
SHA1f57c5db795dfb323c157bad2517199ffe3c9f135
SHA256f765c41eae0a56c67574ee191371fe95de287d5edb3e527d465fd973c351b4cf
SHA51271a645ca0f0322fe657328f7352614c55cc4f42583337129d15cf23987f460ecec927b31869b287dd4137bdbf6bb25cc7cb6780095c7712bf1f19c41061ad01c
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
524B
MD5db7f87455f0ae9573feb131a3d49cd55
SHA14f22f5d24d114795938ebbedb7d5041dfe2b1b58
SHA256be999cc32986c33dd7e507c96e27c112e0a666ab57f532f4c404645983a413f7
SHA5127e765806cae73b5c8f09544963fb8a542cd75d97d67f3e3d83067cd46189636b5af606d86f1bce46477ded26502b69a8964c170a0c2cd41e9de8d9df129cf7ec
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
48KB
MD5a7d6bf04fec5f1508db0438d68e9a402
SHA19a953c934435c74177667628c25c433001fa6d5f
SHA256841e2bb23e44181c927e25da4500c0074deced030268dd50a8b09ae34e1835bb
SHA512f9fb075301c4b6b39d0e40370874820eecfcd14466bc514feca209b5e32861d963c96c7cefd6cba069c9d546574f8a06bfc56af1a0ef9c42b6c9e4bd6b44ac7d
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
524B
MD50355e2c3155caba78112fa84baf7ae40
SHA14865ff7157e65aff14c023efad021a798dbf1d26
SHA256bad038badc209462946af041850ef564d0ad1a9bf80c1b5cd3ffec23845335b2
SHA51237ca1a21fbafc46c76e05080f7157810d768d9946bb9f02cd0a2a0eeee03e2eaa2bb65ade0ba1b3729fae4cc2ceae6ed7560d2bc329284b900c632f17b84cb9a
-
Filesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
Filesize
60KB
MD53c87455afe26c939517d4359a0fd8559
SHA1a86eee3118e50aad254530a10bb11200be2d3728
SHA2566e41de68f2ef1d522dbfb319f61029477c77cc64876628a47bd7b07097376680
SHA512c86acb1b0f4345fd79192654391f7f60996eb310798108ecc86e512e8ee4541441104f125aea0b775f0e77b53d2feba9d83413e39c71aca71cd7e1c7c89bbd92
-
Filesize
13KB
MD5792db2b47220d90341d7d09d0622b65d
SHA179b5d05da94a6aed08cd14b09b1fcdc2d5a0eb78
SHA256518401c54e879df123a8b89445359a2536896329e773149aadc629bb15c98312
SHA512afecc5037227deb1bcb470a2b852173a16ec567462c3cb43a225f8dc0a2f122312d75609993fe0c88dd28c3ccdc42875f9f04a3072cd10dcbf78ed386aab20fb
-
Filesize
162B
MD576f16d26df9ad01f9541ac66a575db33
SHA122c1135ffde1c66f8173a87ba31335cddc1abda4
SHA25663bd80c127e70a2f0b09150949fc7d66ff81e37bd4b7b7d0d8eca940deb9d87f
SHA51290cf84e8ab73e272990d1ac4d6ed9cde3e23fdc412cfba3e97f383e71ad7a07ef9d17f47dcb2bbe4ce29217e6f6bda2fcd854d35e74aa6940c4d3263a12b152e
-
Filesize
229B
MD511c45307b43f7607d9e60f89b9d5baa2
SHA1167b3eacc91e00f49328c104968a42926234f7f2
SHA256126c92300a035b80acf7405866be23f85814590e2db14238d3e842d9666a72f7
SHA512b533b5916e906544e12e7a4f1b0701b8168dd68e5b5f3ce48154e704f46e71f40b1c107eae03004d8c371ea412e424ac63570a1e12bf77b7f4e32af8484c3f1a
-
Filesize
294B
MD5986e35d2918ff970da3718927bb9c857
SHA11bfc5e2c34509b98ece786a5448660a48b89be8e
SHA256f5b8f51cfae21d04ffe263d87317bd6c867ce72a4adeb8dbfa85a15a9077bde9
SHA512cca2aee263039a32e8e1e4066d9a42488d5f5f67b0c65fa3f011ac57f75c82393401a9ad71593f0293a1a57e02c4efbdaf12c86c2b0bd4618bcac29b528a1716
-
Filesize
346B
MD5394d238090c6bb7ff7922333b7538246
SHA13129692f9065fa334539eabde8f05a0d10ba8415
SHA256808df1a9f68960792932134630fc82f718036a200a7f4ca4f01da0b8ad7c7fa2
SHA512cdf0379d7ed22d97f47e89e5ba0d08bc2ffd9b4bf3871e293d03c473139e3bbcfa9ae0e74793ba709fef872557593e74935414da2f94e53f8a090c9f28ad7829
-
Filesize
391B
MD5c8033f4ac9ce09b05cad642ee7901662
SHA16f4a9982bc7dbceea79c73cc4db9cc18870c55cd
SHA256ecd886ad0720d6e99ae3e72d2fcf57443a0ff5b02b52d0c77dad377ac7994459
SHA512c7c3e9876ad09a870b350057f0a6574ecac87b63aa5bb0f052429cc550397156b3f9be64071673208cfa565fc8fa1c3bb13697e3113d58143d86c5b70c22c7b7
-
Filesize
455B
MD5075f120c2b13083ff424a36fd811953e
SHA1d2fb7a8faf939d71ce3751d72d676b2f9dac86c6
SHA256f19a5ce81ff008037e486639d04cf52834308a44f34da93ce562015a4a45c3c3
SHA51236479c7646284fa7dd01134d1e0e280c2c74d29979197463eb49809b891c00b982a77f85b8147d456939a6f9b7d5ac37541f81c7d0ecb35a422da406ed37af08
-
Filesize
129KB
MD5ef95d9a98eca231b99f0dd39d1363bf8
SHA15e8bd4ed31a1f5452d9fa7b81588fb9bd59fae77
SHA25674f1952394d99de0a2411ce20b6b88840693774487635b05f4029249d1d1bbb8
SHA512dcb584ae4310c8f822e980dcced729814052e4b714885ed832604622f362b681bce1112e96f57aa49405bd9bbb5522da4d575395a632fca29e7bf3f6176c2bf7
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e