64bae1e8c61d625b8ce967bd3bdafc623e6066649e8c0a92b454b65abf5a5350

Analysis

max time kernel
59s
max time network
89s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
05-04-2024 03:56

Target

boboslot_1.0.0.apk
Size

4.6MB
MD5

f0870d14cbe2dedf6438bcfb9bdf9a84
SHA1

4cb06258d35e6c583076c836953e59e142694d13
SHA256

64bae1e8c61d625b8ce967bd3bdafc623e6066649e8c0a92b454b65abf5a5350
SHA512

1c7a593b99df8e213d56f87aa7bfbc25384a98b294d1e4ab2e4797e9d9a637f3744bc4753e7c62b6c39ef37561903dccbe93cb68b207d796ccf424f99a321749
SSDEEP

98304:yZcVnRtAo2Ss6tbSZPyWQ5Ep2ZaPEggLCr4qI:BVR6HPyt5qnPRI

Score

7^/10

discovery evasion

Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

net.atg88.android.atg001

description ioc process

File opened for read /proc/cpuinfo net.atg88.android.atg001
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

net.atg88.android.atg001

description ioc process

File opened for read /proc/meminfo net.atg88.android.atg001

description	ioc	process
File opened for read	/proc/cpuinfo	net.atg88.android.atg001

description	ioc	process
File opened for read	/proc/meminfo	net.atg88.android.atg001

net.atg88.android.atg001
1⤵
- Checks CPU information
- Checks memory information
PID:5083

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact