Overview

overview

10

Static

static

10

dabapkapka...ka.apk

android-9-x86

1

LenovoSafeBox455.apk

android-9-x86

1

LenovoSafeBox455.apk

android-10-x64

1

LenovoSafeBox455.apk

android-11-x64

1

busybox

debian-9-armhf

1

toolbox

ubuntu-18.04-amd64

LenovoSafe...15.apk

android-9-x86

1

LenovoSafe...15.apk

android-10-x64

1

LenovoSafe...15.apk

android-11-x64

1

aresEX.dat

debian-9-armhf

1

athena

debian-9-armhf

athena_v2.dat

debian-9-armhf

c

debian-9-armhf

3

c_x86

ubuntu-18.04-amd64

1

competing_su

debian-9-armhf

3

competing_x86

ubuntu-18.04-amd64

3

cputest

ubuntu-18.04-amd64

firewall.dat

debian-9-armhf

godEX.dat

debian-9-armhf

injectso_arm

debian-9-armhf

injectso_x86

ubuntu-18.04-amd64

iptables

debian-9-armhf

libphonehook_armv6.so

debian-9-armhf

1

libphonehook_armv7.so

debian-9-armhf

1

libphonehook_x86.so

ubuntu-18.04-amd64

1

libsystemh...mv6.so

debian-9-armhf

1

libsystemh...mv7.so

debian-9-armhf

1

libsystemhook_x86.so

ubuntu-18.04-amd64

1

nb.apk

android-9-x86

nb.apk

android-10-x64

nb.apk

android-11-x64

Analysis

  • max time kernel
    1s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20221125-en
  • resource tags

    arch:armhfimage:debian9-armhf-20221125-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    10/07/2023, 18:26

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Payload did not run: Failed to set clock: Failed to set time: Automatic time synchronization is enabled elf interpreter /system/bin/linker not found
Report Analysis Logs

General

  • Target

    injectso_arm

  • Size

    15KB

  • MD5

    987a977f888d9fd21b2ebb9359d7c5cd

  • SHA1

    4fef24876c6f8f802a3e9d1f00e5dcf5ba29a10b

  • SHA256

    ce91097b856d14f3bedc4317c5ed4b0595f27fc78f9807b8bd88f3c895d28ac2

  • SHA512

    704e62b128abb7259377068ebbbff57156ea025e9fa47c5e19da8dfade90134f1c8b96c3122f45df499e12eb69c9fc8a7701c973e726c7c0891c3f7de6b5b4a2

  • SSDEEP

    192:/SEM5KYhSSm8v5SmAJdLMtXz9Rl6GQ0XFx1w0ccySZwaVl+sUq:w5pFcu3l5FnPIhq

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/injectso_arm
    /tmp/injectso_arm
    1⤵
      PID:368

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads