Analysis
-
max time kernel
2325187s -
max time network
147s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system -
submitted
20-12-2023 03:44
Static task
static1
Behavioral task
behavioral1
Sample
81e580cc67119ef9dda9fa2de1720f1d69aa622dad0a8101863401ce5781fefc.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
81e580cc67119ef9dda9fa2de1720f1d69aa622dad0a8101863401ce5781fefc.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
81e580cc67119ef9dda9fa2de1720f1d69aa622dad0a8101863401ce5781fefc.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
81e580cc67119ef9dda9fa2de1720f1d69aa622dad0a8101863401ce5781fefc.apk
-
Size
602KB
-
MD5
fa2a315fc4d708c008f52f88b23dd159
-
SHA1
c7b176d4f5022622ad2c80133d29ec2b925bdccb
-
SHA256
81e580cc67119ef9dda9fa2de1720f1d69aa622dad0a8101863401ce5781fefc
-
SHA512
98d7bac1fc48de068394674cf81af22cfd014fda498464cf7b5e8e91c51367465b8cc7c453821c20f5dd011ba00699cc814f87675d48f6dc3f3581f55cf8f3c6
-
SSDEEP
12288:m/v7Qo16uCVafsfONGL6MJBRqT2M0L5v2P2M0LwUc:m/v7Qo169MfRdeRqiM0L5+OM0Llc
Malware Config
Signatures
-
Requests cell location 1 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.ishow.dtsg40 -
Checks Android system properties for emulator presence. 2 IoCs
description ioc Process Accessed system property key: ro.product.device com.ishow.dtsg40 Accessed system property key: ro.product.model com.ishow.dtsg40 -
Reads information about phone network operator.