Analysis
-
max time kernel
2303428s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
19/12/2023, 23:41
Static task
static1
Behavioral task
behavioral1
Sample
6e1b307c219f133e5551328439ac48ed9e3f846bdde43cc7950a4fce6fb0cbb5.apk
Resource
android-x86-arm-20231215-en
General
-
Target
6e1b307c219f133e5551328439ac48ed9e3f846bdde43cc7950a4fce6fb0cbb5.apk
-
Size
2.5MB
-
MD5
d04b8b4841ee377b907681b220358155
-
SHA1
67ebf978139e6b1c2e0fea8af7c6a33015318bcc
-
SHA256
6e1b307c219f133e5551328439ac48ed9e3f846bdde43cc7950a4fce6fb0cbb5
-
SHA512
1cf189579ec71f49b7ce799a57976446061d881f5ef1ef31bf07627cba5dd3afabdecdb9de357c8560246d68b6b0a048a1ae12c70468311a25c8cbfed053a0c4
-
SSDEEP
49152:NSxsB2KNjNHmLlbrty23odJk5lXlivV3C4PqPbjfEbj7wKNvsz3aIe3oeYUcunYE:NDTNjZ8rA23omOC4P8fS2z33X3ziCG
Malware Config
Signatures
-
Requests cell location 1 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.ssssdd.dddd -
Reads the content of SMS inbox messages. 1 IoCs
description ioc Process URI accessed for read content://sms/inbox com.ssssdd.dddd -
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.ssssdd.dddd -
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.ssssdd.dddd
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
35KB
MD5e1ab911d4b585a26aae02d8540575013
SHA1ac148f7bdf95edddc97d9224ff51a771f1070520
SHA2568a71fab57b4a03f0b37095daa2eaa086ec6ed6c1c6166ca67c0e0a9e14cc85ca
SHA512983ec12cde3cbfaffb414b8c8eb17c793bee558eb51b9d5e630f9bd5f312e0ce55622719aad6097a799286c25001212b26d7053e7e110a4918beace33d3bcbc4
-
Filesize
27KB
MD5c67ff641314b7710fa8a4607f5c54cf2
SHA1b1939b0230910611673ca286bb26b307afd0db30
SHA2566715a6084c989c42dbc007f21084c4c907ebc78355f9b31c1071756eaf61625e
SHA5129586077b529ea80cb546c342a5916e16fe8982aafad7eaddee0a6c1d1582a16962042133f617f48947e99fa10e1c0d9364d04dcdc60cd35ae3652dcfde44bf14
-
Filesize
38KB
MD5cc860a00cae01d4f2e88cfcbf05f06ff
SHA187778550a32109a679a2d28dec9ca4e6c0ca19fc
SHA256494a419030f286fb05789ded096c05326a44fe2ff6708a0ad2e2c862c5d8d347
SHA512dbe68454e053ff4d494ebf60daa52b856f64b393d37f89a8f91a0239c4ae799f51621b5bb791a497d93ff7b2e8194acfccd82994399f20166596275ccbb10057
-
Filesize
111B
MD55ce2b2607db695f19af7df34027ceee7
SHA1abcd6ac52e47d99a7feca077ebe034858c051ec5
SHA25662eeeda527bc94d0f143675c127cb0dcdc93e169594cd3d7ac3e90dd277f5390
SHA5124cead14e9c07e34a6aecc436dc4fa50bdcc345c6312a259d215c75850a44cc59b73fd2a9839e2024a7baddd8c11e3eeef147cfce4328eaafd5c6ae9a9f06ee96
-
Filesize
213B
MD5ba44db0e19c53dd5f87b2dd70d32d2a2
SHA1d165977e5a18ae3300fc000c973149e0706e47b4
SHA2562843acab7521100cfa5daea4df5ffd238fecd66e730ceecd866d617e65a2e54e
SHA5120dda5722663223605d7ee7f10484a8a6ed3b55ebae4c9e3dc37846b08754045f9eb3b78fe3352742dd4c01973b9f39855bbc18ab514a67c62e0d8186ccb7361a
-
Filesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
Filesize
111B
MD54ac62045455108edf05ad089d83b9204
SHA18afb19069645767fd020a0ba474c12724faa632c
SHA2561b1779bdda9b5271d56ec174b374040d9d53f877c1c36d11892da48fff0cff3f
SHA512307481717f55605bf1b362948ff6eed391ed1c2ad077598dffb9e9b57eba2cc8999fc463fc477bbce900ab4b95b74ea3a0d1af91e20c38763c56d6dae835e2c0
-
Filesize
167B
MD5e723baddc4534e58048b2f86140c838a
SHA1cd4cfea41b6de33753fa91f709c751e55459263c
SHA256ab83cf78c8cf741df2dad9aec694dc03437a2b178c0222851b1f06e0d512f52d
SHA512fe7b3b7a200cd6a9d46417b09ced8b1978c9660a8a5f53b9999a21bbfedbd32508afd5a8c61446de9e2b370a293b92b315585c4047f0578087cc7b751d8055e4