Overview
overview
10Static
static
10dab.apk
android-9-x86
1LenovoSafeBox455.apk
android-9-x86
1LenovoSafeBox455.apk
android-10-x64
1LenovoSafeBox455.apk
android-11-x64
1busybox
debian-9-armhf
1toolbox
ubuntu-18.04-amd64
LenovoSafe...15.apk
android-9-x86
1LenovoSafe...15.apk
android-10-x64
1LenovoSafe...15.apk
android-11-x64
1aresEX.dat
debian-9-armhf
1athena
debian-9-armhf
athena_v2.dat
debian-9-armhf
c
debian-9-armhf
3c_x86
ubuntu-18.04-amd64
1competing_su
debian-9-armhf
3competing_x86
ubuntu-18.04-amd64
3cputest
ubuntu-18.04-amd64
firewall.dat
debian-9-armhf
godEX.dat
debian-9-armhf
injectso_arm
debian-9-armhf
injectso_x86
ubuntu-18.04-amd64
iptables
debian-9-armhf
libphonehook_armv6.so
debian-9-armhf
1libphonehook_armv7.so
debian-9-armhf
1libphonehook_x86.so
ubuntu-18.04-amd64
1libsystemh...mv6.so
debian-9-armhf
1libsystemh...mv7.so
debian-9-armhf
1libsystemhook_x86.so
ubuntu-18.04-amd64
1nb.apk
android-9-x86
nb.apk
android-10-x64
nb.apk
android-11-x64
Analysis
-
max time kernel
4s -
max time network
103s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
08/07/2023, 04:37
Behavioral task
behavioral1
Sample
dab.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral2
Sample
LenovoSafeBox455.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral3
Sample
LenovoSafeBox455.apk
Resource
android-x64-20230621-en
Behavioral task
behavioral4
Sample
LenovoSafeBox455.apk
Resource
android-x64-arm64-20230621-en
Behavioral task
behavioral5
Sample
busybox
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral6
Sample
toolbox
Resource
ubuntu1804-amd64-20230621-en
Behavioral task
behavioral7
Sample
LenovoSafeWidget115.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral8
Sample
LenovoSafeWidget115.apk
Resource
android-x64-20230621-en
Behavioral task
behavioral9
Sample
LenovoSafeWidget115.apk
Resource
android-x64-arm64-20230621-en
Behavioral task
behavioral10
Sample
aresEX.dat
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral11
Sample
athena
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral12
Sample
athena_v2.dat
Resource
debian9-armhf-20221125-en
Behavioral task
behavioral13
Sample
c
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral14
Sample
c_x86
Resource
ubuntu1804-amd64-20230621-en
Behavioral task
behavioral15
Sample
competing_su
Resource
debian9-armhf-20221125-en
Behavioral task
behavioral16
Sample
competing_x86
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral17
Sample
cputest
Resource
ubuntu1804-amd64-20230621-en
Behavioral task
behavioral18
Sample
firewall.dat
Resource
debian9-armhf-20221125-en
Behavioral task
behavioral19
Sample
godEX.dat
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral20
Sample
injectso_arm
Resource
debian9-armhf-20221125-en
Behavioral task
behavioral21
Sample
injectso_x86
Resource
ubuntu1804-amd64-20230621-en
Behavioral task
behavioral22
Sample
iptables
Resource
debian9-armhf-en-20211208
Behavioral task
behavioral23
Sample
libphonehook_armv6.so
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral24
Sample
libphonehook_armv7.so
Resource
debian9-armhf-20221111-en
Behavioral task
behavioral25
Sample
libphonehook_x86.so
Resource
ubuntu1804-amd64-20230621-en
Behavioral task
behavioral26
Sample
libsystemhook_armv6.so
Resource
debian9-armhf-20221125-en
Behavioral task
behavioral27
Sample
libsystemhook_armv7.so
Resource
debian9-armhf-20221125-en
Behavioral task
behavioral28
Sample
libsystemhook_x86.so
Resource
ubuntu1804-amd64-en-20211208
Behavioral task
behavioral29
Sample
nb.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral30
Sample
nb.apk
Resource
android-x64-20230621-en
Behavioral task
behavioral31
Sample
nb.apk
Resource
android-x64-arm64-20230621-en
General
-
Target
competing_x86
-
Size
197KB
-
MD5
5c332069ede27cbf9fe19f9015676c19
-
SHA1
db8cf8cd6c4c01a9c932046f4d46a0f030f1554e
-
SHA256
c853b46d41d3dc8c93520a845e7f84bade3597f282e6893921b969d3ddc72599
-
SHA512
014577690e790c4c880eb66b27eb569a3aa2e6dcee97a10777e95018a3fbf628a0c7ab85d8f665f7a9afc2020c3f32366af92a237ad8fbb5c3359a63ee9f6962
-
SSDEEP
3072:aZ8VhvCl0UudCv51f+38MgaraJZcYatCRtXZozIj:BVhvClgdCB1HM4jBACTZozIj
Malware Config
Signatures
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/570/cmdline competing_x86