Analysis

  • max time kernel
    8s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-20240221-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
  • submitted
    16/03/2024, 22:03

General

  • Target
    9a1ad89234fbe8a6ad1eca73c15e1e9f784b770d0f5c8cc8f7d025eeaea3e61b.apk
  • Size 1.1MB
  • Sample240316-1yn2fsdd6x
  • SHA256 9a1ad89234fbe8a6ad1eca73c15e1e9f784b770d0f5c8cc8f7d025eeaea3e61b
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs 1 IoCs
  • Removes its main activity from the application launcher 1 TTPs 1 IoCs
  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.fimudidukira.soducake
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    • Removes its main activity from the application launcher
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5040

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        androidx.work.workdb

        • Path /data/data/com.fimudidukira.soducake/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512

        androidx.work.workdb-journal

        • Path /data/data/com.fimudidukira.soducake/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 dcf8262cd6ecfcf64688c99f09574933805a8528a30ce1884d59d21f570b3bb3
        • MD5 SHA1 SHA512

        androidx.work.workdb-wal

        • Path /data/data/com.fimudidukira.soducake/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 8b3ba7ce3f108458059802d46e1c836e602fcf7fe47d1a6d71011c0c3ace272e
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.fimudidukira.soducake/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 5212787748433ed170ddb2de29799146b3f59612609d2e0f588fb4bb69a4ee3a
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.fimudidukira.soducake/no_backup/androidx.work.workdb-wal
        • Size 148KB
        • SHA256 5b39421b171c367751c4e3dafe97282052272f0474f136f3db625773911d1a05
        • MD5 SHA1 SHA512 SSDEEP