Overview

overview

7

Static

static

6

23b953a83e...a0.apk

android-9-x86

7

23b953a83e...a0.apk

android-11-x64

7

Analysis

  • max time kernel
    2810523s
  • max time network
    151s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 13:42

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    23b953a83e3f3101ba29da72dacd6c9b0be1565926ab32e1ff44d11c82d96ca0.apk

  • Size

    13.1MB

  • MD5

    b28f76d80faa701a1cdb34a3e9b2d47f

  • SHA1

    2f15f9d1a92a06a423f00a0e444ed2ad9568a81f

  • SHA256

    23b953a83e3f3101ba29da72dacd6c9b0be1565926ab32e1ff44d11c82d96ca0

  • SHA512

    1ffe0056e9ad23df9ad825d3c12b6937dd23d4eb0220f74072a730b0c1b7bbb9cf3f07500ac51c03fe27c5c4ff0223e8abf3fc6cf27b7b16a8123d35e1e16885

  • SSDEEP

    393216:WJoUQSpx28xHzoyJSOaWH0b322ZGuL+cVO2k:WJmkHHVJhxHwmFqPy

Score
7/10
evasion

Malware Config

Signatures

  • Checks Android system properties for emulator presence. 6 IoCs
  • Checks Qemu related system properties. 7 IoCs

    Checks for Android system properties related to Qemu for Emulator detection.

  • Checks known Qemu pipes. 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Checks the presence of a debugger
    evasion

Processes

  • com.tonglubao.quyibao
    1⤵
    • Checks Android system properties for emulator presence.
    • Checks Qemu related system properties.
    • Checks known Qemu pipes.
    PID:4255
    • getprop ro.product.cpu.abi
      2⤵
        PID:4280

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.tonglubao.quyibao/files/libexec.so
            Filesize

            96KB

            MD5

            8765e396c966bd6b9b6e20082ad15b97

            SHA1

            0aea2febce497f3f82a001987b12d93084c43bce

            SHA256

            96ce44c0d7173dd1ed5ed4c07f918fa8697c4408e632fe0f4dbd0dc607cf260f

            SHA512

            72e3e58553849d319172a8ce4c2d879408fe8c8c901d5d8f007f23ef7dfb0ff78ba0a3207f68b90c7a9a465bdad118c7d52cfc624309f942bf961d8b3e463a64

            Download Submit