Analysis
-
max time kernel
115s -
max time network
120s -
platform
android_x64 -
resource
android-x64-20240221-en -
resource tags
-
submitted
16-04-2024 08:31
General
-
Target
3db0d587001285f306fbdd73d29ad62ee826a0c27585ebaaf1d993504fdacc5f.apk
-
Size
5.5MB
-
MD5
deba43a71712c3a501970e3fc5ab1ced
-
SHA1
0d9f42ce346090f7957ca206e5dc5a393fb3513f
-
SHA256
3db0d587001285f306fbdd73d29ad62ee826a0c27585ebaaf1d993504fdacc5f
-
SHA512
331ca7455b08895c4821e24abd052f287570494862d54bab9039b0bd6476b897c679cdaa0e4f542f1d562063f18f9d076a76876d2807f37d331b6fbfcce6ed5f
-
SSDEEP
98304:hU7aQYpE7Bm9K0E3Lw1QPenWTCORGRAhvRNB4p31aVCH90fr+6vSI:hUHY0B0EEmPCWdGRjp3cT
Malware Config
Signatures
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries account information for other applications stored on the device. 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect account information stored on the device.
-
Reads the contacts stored on the device. 1 TTPs 1 IoCs
-
Reads the content of the call log. 1 TTPs 1 IoCs
-
Acquires the wake lock 1 IoCs
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
Processes
-
com.tech.sideswipechat1⤵
- Checks memory information
- Makes use of the framework's foreground persistence service
- Queries account information for other applications stored on the device.
- Reads the contacts stored on the device.
- Reads the content of the call log.
- Acquires the wake lock
Network
MITRE ATT&CK Enterprise v15
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
40KB
MD515d5b92dcbda7ef7f9ca327a903e46e4
SHA1ca153b66028a58d90346ff8abadbdf01b95c37b1
SHA256e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
SHA5122352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
-
Filesize
8KB
MD524e534b3250a5c8079e394fdfb60fc75
SHA125cefab3f851b15ec323c25bdb76a680ac76a3cd
SHA256c8694d86cacb36b9fd864cec9a181b7e93f73187bfd61419f49f1080554adcef
SHA5125432c45b28efaa0d7512890e8a3726adc32f3b52e9d710fe4423e997063a75ecca40e8db4e6e3a308c13f46fc99cfb6d912d43b30051f7eeae1f8278db0951bf
-
Filesize
512B
MD5722bc07942f5667ea3e3777439b75958
SHA1421ae9bd6ce04cd70c1acf9897030f27ef69e1de
SHA256a9b87fd93a06ac8b16949c76313b5950855fec6f7841c7453925ae4857d2e5e9
SHA5124c003bcd7b8c3841b842cd2f1575b7df7331df713912e3cd84c51aed39f033458d6b9dd51c30da83eb7c2e67d209be8905252eb766a03f153e062d7cd797061e
-
Filesize
8KB
MD58abf06f388b3850bb36d0fe257df1574
SHA1cbb4104ea5ccbe916344e542f3dc8e3d23fcd831
SHA2561fe14e544afee3ca4ec12bda9f10e8550bd72fb6b310b47081093538fa47b6fd
SHA51275fc67a9482e5e79509ceab0a06810de7dcf318a19cdb92b7d7b1edb0abda4fb90787e198cd6b677d067b5d840ad846864f933259a919d58d0eaab96e407ada1
-
Filesize
567B
MD538ea2c305229e3d4ed38dbbde19d5d14
SHA1b63d99f6e9250731780842d5865ae790603efdb9
SHA2566982ff9f9c978f7f686744ce9d1f876168162ceae6306c5799c064b7d1a938e3
SHA512908a7368269a9e7bd07fa5dbadccc55e3487cc597449f8816651ae3a4f115743e057f2d5af189c192c71015a681d08b44cc6b3186edb6d4f0a4898299dfdc7e8
-
Filesize
90B
MD578b0d32a5a86eb529d0b7e973f76b189
SHA1b0fc57a2652137ba16a48b02e9e6271a8ae9b0c6
SHA256daf7fa98e603916571f18296be60b0df6ebd3584c8e494b2c83a69c86f5e615f
SHA512a72a964ec54e691bcda537457f348932e8c0c0b46403675b65b3d1c1b38d1b1678aa36550807d56d15727cc823049892171dd1c99045ac760c80fb1115247b8b
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD593214b18cfd6821de7d0f9076a306825
SHA18d0089183af57b23f003661efb177cf720838344
SHA256632102cf877d68b921f1d8b1d19bd9c045fea9cdde1550859f0dc464183c8641
SHA512ec2ac697163914fbb55d7c7bf8f45f65ab42e31f7cfed12aa1a40b007f11a59513dcea85a070d0ba7c9a847313fb54e95f7e81fb8a4770ace2dae04125daf90c
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
108KB
MD5905c84fe0ca8d105888820788f1edc3a
SHA130bf8f09c04b5429376e5b15b5168744e28076a2
SHA256390ed3417937381ad96422ce962c8c814f9be1fbfe5fdd0a9b6198d46a33cdc7
SHA512b5aa7a7f246133124c4ee48ffe2a94d6a46593ae45af74c3b7ec5087c96bd3f43a1fd13b7865ee537852ac5ddfa29a2690439fab8aa3bfd0fd776b062f1ec5ef
-
Filesize
225KB
MD5b9601f4bc97d247ae151c35d50b30fd7
SHA10606c65ad27fea380708cd361719288a08d3f09c
SHA2564874bd8eab54596ebe664a698d4e61641fea2771b4efe4969f403787b97bf16b
SHA512a6ed2372c7471bb61d4420a434e538417a05197511d031d342e64ccb9569ea2812bd079f7d2205312d04f98beabcf27a4d6cf7c0895709638241a3f28ec339b0
-
Filesize
16KB
MD57fce131c798990876bfc318a6d3f7f76
SHA132168ebd921379158f44445f4c986a5f3455c7c7
SHA25671ccfb51c8c4d0dd560e90ff7c2518e35f3d857c9c1813b6d59509b6dcb73c45
SHA51225cf31a8b55b3ad38853f8f560f6d72fb7b7b1a5857a82101fa07d1ec17df8ab2ea16252fa19256f0272ad894f16652520e84813a6c5acd271ed29b9e865d3f1