Overview

overview

10

Static

static

10

dab.apk

android-9-x86

1

LenovoSafeBox455.apk

android-9-x86

1

LenovoSafeBox455.apk

android-10-x64

1

LenovoSafeBox455.apk

android-11-x64

1

busybox

debian-9-armhf

1

toolbox

ubuntu-18.04-amd64

LenovoSafe...15.apk

android-9-x86

1

LenovoSafe...15.apk

android-10-x64

1

LenovoSafe...15.apk

android-11-x64

1

aresEX.dat

debian-9-armhf

1

athena

debian-9-armhf

athena_v2.dat

debian-9-armhf

c

debian-9-armhf

3

c_x86

ubuntu-18.04-amd64

1

competing_su

debian-9-armhf

3

competing_x86

ubuntu-18.04-amd64

3

cputest

ubuntu-18.04-amd64

firewall.dat

debian-9-armhf

godEX.dat

debian-9-armhf

injectso_arm

debian-9-armhf

injectso_x86

ubuntu-18.04-amd64

iptables

debian-9-armhf

libphonehook_armv6.so

debian-9-armhf

1

libphonehook_armv7.so

debian-9-armhf

1

libphonehook_x86.so

ubuntu-18.04-amd64

1

libsystemh...mv6.so

debian-9-armhf

1

libsystemh...mv7.so

debian-9-armhf

1

libsystemhook_x86.so

ubuntu-18.04-amd64

1

nb.apk

android-9-x86

nb.apk

android-10-x64

nb.apk

android-11-x64

Analysis

  • max time kernel
    1s
  • max time network
    125s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20221125-en
  • resource tags

    arch:armhfimage:debian9-armhf-20221125-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    08/07/2023, 04:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    competing_su

  • Size

    62KB

  • MD5

    865290b56c91a7b7a187356aa4f132e3

  • SHA1

    463e40dfd1cc18a7550cffe5c349f927bc10f5cc

  • SHA256

    e089e300e93ab156d91ea537b1e1ae78935b6448a3ef90a916bfafe60440e051

  • SHA512

    e14b6daf6439a2425474f5b62a44463ef215217d80783c12515a8add60ee44e94a04ea16faf8e9ece1de66bc0708e983ba6f3545ca817318f08e1020192136d7

  • SSDEEP

    1536:Mc3CJO+rVr/2szNgc97/hA8U4jNgYNXKE8JXLbwsDNBIz:MlXJr/Zj9lAT4jNg8KbDBI

Score
3/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/competing_su
    /tmp/competing_su
    1⤵
    • Reads runtime system information
    PID:376
  • /system/bin/sh
    sh
    1⤵
      PID:376

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads