Analysis
-
max time kernel
47s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20240221-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system -
submitted
19-04-2024 02:28
General
-
Target
e7873a1af0dd823b6b45bad331666c31561d0554f300a539a52859f03d3d4059.apk
-
Size
85.7MB
-
MD5
0fbf430746e715af26967fc101df7188
-
SHA1
7c3e1827e2851fd5dad011dd6f4554954144a38c
-
SHA256
e7873a1af0dd823b6b45bad331666c31561d0554f300a539a52859f03d3d4059
-
SHA512
485a1423442c58275d10fc540cac041b8319e78a402c167181380aca71e2b83c24f7b6abbd5c69e2e8d4166308edb4a994c052ca1db0472e5a855acc3ef2cb45
-
SSDEEP
786432:jZXvO65pqoUOldW+d52BY06gzmc3ImVHZGV453zwXeo8ZTHMlnrAk/90EuKLm:FXW65Y+syDNuVHZ44RVrZHMRAk/90ERm
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
Processes:
com.uhg.mobile.health4medescription ioc Process File opened for read /proc/cpuinfo com.uhg.mobile.health4me -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
Processes:
com.uhg.mobile.health4medescription ioc Process File opened for read /proc/meminfo com.uhg.mobile.health4me -
Acquires the wake lock 1 IoCs
Processes:
com.uhg.mobile.health4medescription ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.uhg.mobile.health4me -
Reads information about phone network operator. 1 TTPs
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5bdd1b300c1b3bf542f617f323c6526ba
SHA199a25e569627391f0489cef5bc57e6c8afca01dc
SHA25657cd2f3f60e992a62454acf26afafd80997fcd01cdf3489e9ff035cd2ed16e41
SHA51238e36945fa3516c36c6a9aacd307baddaf758d84c5036075919a94a27c9c0dc973345c0199663a8995f681a79efda2a2b572d9c42808396c5db5e0233866c6c6
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
40KB
MD514abd54adc6585effe6c603197391a40
SHA1e5bcecb42902329159957f6f9bd26e989fe89f43
SHA2564734a732538aea8d8ec61375e68a51aa4502d7a893f6c1ea7b54af62c2f74eda
SHA512812c78b73478df44f243b34f9535a2a3674780960d8c37d1e9e655ba696a374e335413a1acf7f043a027eb83d0acd7daec1a063d172941b730330b9093d4d6c8
-
Filesize
16KB
MD56b63b92f6d4ec960961ab1deba76d015
SHA1bf6ffccf76f70b897c1a6cb46d129418190f509d
SHA256a16377ad9b4b59218937f24a93699b9a7cc2409814ad71504ffb45c59fc699c9
SHA51243e6e2290c76065c77021b625e5f31d41df9f98b2efec0db7e363c7b34bbbeccff92699465c899a34400ddd1195d67f580e4f0eb92479defdaebe4ea24fd9e21
-
Filesize
16KB
MD501fde10e2e83f018e893e0984dedfe31
SHA187488a7d17476299346d71a8fa414a307f8e2b74
SHA256d998904a8e59f4845f2f53785fa3cb26fd19fb836876e8354d3a95e62792a962
SHA51278b6982237fa616289fe7fecda76acbc73e5cf5757ccf07870cfbc67cc8b9a9050bcdeba61a591ba56840525cee057bed32f077d8a71411e96b0acdf51e1fc6b
-
Filesize
16KB
MD57d075ebc0fff06aadee6918d90e39dd6
SHA166c43dee1489bb28cfd18ce20a6e0fa802bd2b03
SHA256bee9ce824b6671a05a6b6afcd20a614902d5ceb560c50b78639b89209aba7f3b
SHA51211310d19fb7f1138dac901c399ccc2d7ef550a2647929d8e9b4121d83b9ad08369879e4e64b28495fa4779761f1297a48bba0c64ef87c2ec61ecd93148f54f86
-
Filesize
16KB
MD515c7e119c5b97da9b6f4a3d182a6fbdf
SHA1c067513335edd3feae2fce414a44e9cba8ff4016
SHA256cbd9ff3da4ce9f39058d222410ee2bdc90e7bc2622e3e67b4f950a0e4a036f86
SHA512f04bd6eec84164dd5e78d05c752b81ec847eae8dd05ca9964fd79c2e08751a24a2020a725ad836decd8e4fc784d7ed390aa15032ef6168ceb7d56a493fbcca10
-
Filesize
16KB
MD51be8e602fb28c500ee75cbcae7b45074
SHA172f4d5366b661d61148de3999939e6cd2f7c1b2c
SHA256b6ac0d6cf38b7ca8644fabd934788e1ff72e058a773c7a11805f9e2329ce6c3c
SHA512932aff0e32cbd0db91cd3a7d0e73c67a01268b84090c1ff07c40b4291e519fc06c6f11fd5806b79848d6a147636045cb34ed8a263ba6ffd6d7ac803bbfef1a4d
-
Filesize
16KB
MD5c19254c7dc100aab64714d172876107c
SHA141dbefbbec5b692eac72af621e459c95d4ac9d94
SHA2560f95ea975178563225d5e62d22b457c0cd22ab1f71a48e9e1a4903024890aebb
SHA5120a787cf663d0baad78c0fb4d02ca8e01c1d504881b1ddcc545f4e6d385d94fd168e0740106ac5f26e20e7ab410e60be5d118fe57aa78f981fe38cc7635f3d544
-
Filesize
512B
MD5c3342be177a5c1c5f987d18a791f2dac
SHA1b85153003649b05e49a15a70e160de5064ff9c2d
SHA256b3e00d3a6052502716ad891af8dd19f16c169a70b9ba2a52ae4b77cb8278a1f9
SHA512a77284da7a932c980c0ed6973ad1239735a564b36ee330be4ecf54a0d7ab5b49b9d1c54dff809145e5a177f96126c32341c07d74533699e5ccf8de063d35cb11
-
Filesize
36KB
MD55605a6a307c5f43c56aecbe642b875f5
SHA13f4b83a2c752b914d0a06644670ce61dfe6bf3ab
SHA256787ccc7edaef8db5d520c0b36f34283e686a928302f5c5a5866f1b981a5431b7
SHA5121a7760388b399e3167b70f4977525ef14325ec5e1f772b54d1ddfb51df851f2e02705766abf5ba2d95aa25df10425d703c370e52db320048939a46c5f528b342
-
Filesize
4KB
MD5f1512bf9ddba15dcb8759c5d9d24b61f
SHA19964f34e4285a7402ffb0d8614299ccfa8a62d25
SHA256a05f5673d3d2a30311fd54c7a0cb0ed7bca5e9acb0d24014c4d1a9e11f19df17
SHA512ac1cbd2e2ad7f339e41c50fe9bba087d514ee9a8e73129995aea078d56ab651c6d5e4f77c529d761326ad1dc31aadf837f053523748526d944b37597787df92c
-
Filesize
4KB
MD5fcd794289717596b6f244aa38e7b1dfd
SHA111ac1385a402f5e6c2dc60300499df4796a98a3f
SHA2560f1e93921ebb78b2cdfa179ebea9aeb7c95ba268f26317bb734c513b6a0d1d44
SHA512638dc405db9cfb4cf0ae8178abc88e70aedd156acee4a3ffecf2fcd53bc999311bb07ab17d2dd00930db03e0f97e0389afec9b5a81f3165b74b3ee0aa85c1059
-
Filesize
4KB
MD5182c24fb2266d70c68fe9f0e48c9df63
SHA171f71fe256d0a77d17e0f51c6b69a624465d62b1
SHA2560b9521f8180d509a2933a58db768ffd61580f6aa31dc6c9b5dac83a3aa0e1b9c
SHA512a459afe309ccc64a75300d641d9cde9d56974d864dd39778631c4b8cd091764d495ea686cd7e1cd98b53ff1c8527d8bc8460af9be71b3493b1451bf262217e8f
-
Filesize
4KB
MD5d4f361e6a6f48abe7a33f6d6d939efcf
SHA17a0cf77d02714807104c5e5d39594ccaf8743864
SHA25668dfa7e56ab8d5ae8fa6140a6bb1f0525b8485d81443901f699780ac2e872561
SHA512fef4d40c2b7d218a5dae729154019332aa31cf5fcf9fe31a438227d61b6fbab81c4038f8802e9f510a902149b99994862484db73af312167d998f8af476dfab2
-
Filesize
4KB
MD59834e14a6b17d030d8bdef43766f96ab
SHA1d37e77f645fab1dbf5b1f9eda4337faf75719d1d
SHA256eb5ab8dcb7eef6d2296551427ca651fe820978083eb1de0aaef8471072d80946
SHA51246e34035f3a9801d3fbaff6336ad978b1c19c757b95b8757df5686225c4d81ff8fa89dd763a02800763bc8b6ffc74ae080045880d7cf79510208ae31f2e807ec
-
Filesize
2KB
MD53a78dd20bc97bab152c5c19c58d9a5c1
SHA1c329eb55b0d58fc86bbc54c6de1438fd253e2826
SHA256169d943186aa9d45dc97be30a5af7cc48747b9f88303ce80892abe0dff38ba9e
SHA512c4921723a42b844a61e82acaf431d18c2dee4f2fa6e1dcb4f8b13b1634e837c9ee4fae13d11565b7c2fe0a4a643740597aecc64fad1f0d41777f72918f0659c7