Overview

overview

10

Static

static

10

dabapkapka...ka.apk

android-9-x86

1

LenovoSafeBox455.apk

android-9-x86

1

LenovoSafeBox455.apk

android-10-x64

1

LenovoSafeBox455.apk

android-11-x64

1

busybox

debian-9-armhf

1

toolbox

ubuntu-18.04-amd64

LenovoSafe...15.apk

android-9-x86

1

LenovoSafe...15.apk

android-10-x64

1

LenovoSafe...15.apk

android-11-x64

1

aresEX.dat

debian-9-armhf

1

athena

debian-9-armhf

athena_v2.dat

debian-9-armhf

c

debian-9-armhf

3

c_x86

ubuntu-18.04-amd64

1

competing_su

debian-9-armhf

3

competing_x86

ubuntu-18.04-amd64

3

cputest

ubuntu-18.04-amd64

firewall.dat

debian-9-armhf

godEX.dat

debian-9-armhf

injectso_arm

debian-9-armhf

injectso_x86

ubuntu-18.04-amd64

iptables

debian-9-armhf

libphonehook_armv6.so

debian-9-armhf

1

libphonehook_armv7.so

debian-9-armhf

1

libphonehook_x86.so

ubuntu-18.04-amd64

1

libsystemh...mv6.so

debian-9-armhf

1

libsystemh...mv7.so

debian-9-armhf

1

libsystemhook_x86.so

ubuntu-18.04-amd64

1

nb.apk

android-9-x86

nb.apk

android-10-x64

nb.apk

android-11-x64

Analysis

  • max time kernel
    1s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20221111-en
  • resource tags

    arch:armhfimage:debian9-armhf-20221111-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    10/07/2023, 18:26

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Payload did not run: Failed to set clock: Failed to set time: Automatic time synchronization is enabled elf interpreter /system/bin/linker not found
Report Analysis Logs

General

  • Target

    iptables

  • Size

    193KB

  • MD5

    50e39f66369344b692084a9563c185d4

  • SHA1

    f183b6b09cef0ede5eec55ccf22d246f733f411e

  • SHA256

    d7e96b9389ecc37b15a998b615629ee24d2f6823f14dec13ffd3ad4313a72c69

  • SHA512

    0a0447386e2782ef14f5222bbb0384d76758b9dbecb3f11d147ef2b8f48281abe993f37d6d920cecdb4eeef02ce442b9a7b91e7a3e0a85788e131b73d25b40ca

  • SSDEEP

    6144:3vjxOOaXJIJXP1/x2TvZJ/70qK6m+7vj4R7:/jHaXk1JAI5qA

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/iptables
    /tmp/iptables
    1⤵
      PID:365

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads