Analysis
-
max time kernel
2859117s -
max time network
152s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
23-12-2023 11:49
Static task
static1
Behavioral task
behavioral1
Sample
088c7075f16380105b52b2a3562eca394427821100c2080fa0b2f304981610c9.apk
Behavioral task
behavioral2
Sample
088c7075f16380105b52b2a3562eca394427821100c2080fa0b2f304981610c9.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
088c7075f16380105b52b2a3562eca394427821100c2080fa0b2f304981610c9.apk
-
Size
25.0MB
-
MD5
f78f682bc5b7d3ba883c3080c2439073
-
SHA1
4635a8221e24a92bd3097f3825f1b54da24d3947
-
SHA256
088c7075f16380105b52b2a3562eca394427821100c2080fa0b2f304981610c9
-
SHA512
62d8582e8768d93e81746ae615d77e18c1a20cb13c11adba7cbd66078d828e87db486f9921579f6942d06c50738cb1841bf6a6f44f81562cd332337051f77562
-
SSDEEP
393216:KQTU+VgvruJ3kJcnlMR3vDZ0cbHl8ajCKLWUEk+yZZvKZlEmEI0CU:MIYuFkmnlW3vDZ/8aJMu6Ef
Malware Config
Signatures
-
Checks Android system properties for emulator presence. 7 IoCs
description ioc Process Accessed system property key: ro.bootmode com.hsl.stock Accessed system property key: ro.hardware com.hsl.stock Accessed system property key: ro.product.device com.hsl.stock Accessed system property key: ro.product.model com.hsl.stock Accessed system property key: ro.product.name com.hsl.stock Accessed system property key: ro.serialno com.hsl.stock Accessed system property key: ro.bootloader com.hsl.stock -
Checks Qemu related system properties. 7 IoCs
Checks for Android system properties related to Qemu for Emulator detection.
description ioc Process Accessed system property key: qemu.sf.fake_camera com.hsl.stock Accessed system property key: ro.kernel.android.qemud com.hsl.stock Accessed system property key: ro.kernel.qemu.gles com.hsl.stock Accessed system property key: ro.kernel.qemu com.hsl.stock Accessed system property key: init.svc.qemud com.hsl.stock Accessed system property key: init.svc.qemu-props com.hsl.stock Accessed system property key: qemu.hw.mainkeys com.hsl.stock -
Checks known Qemu pipes. 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/socket/qemud com.hsl.stock /dev/qemu_pipe com.hsl.stock
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
39KB
MD58364e5840894141f9072489f6e9fdde6
SHA15d4ca3bcf6f8645a7a5e57a26601a760c10064dc
SHA2563352a4b0877e8b4093bb37c9aeb51a8032f53d9845e3c75a89022854dafeb35f
SHA51230d90f7b8c532b5c7b9ebc989ceb05de5d508383c15fe8592f7f3d7e710bf37470979601af310c3308dd3f28b88b08a381332b73df08236b06af72b464f09cf4