e445882bd238941ae744f5b78616d3d2d59103215a834f2a364c2addf266e499

Analysis

max time kernel
250s
max time network
1810s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
25-04-2024 11:28

Target

myapp.apk
Size

47.2MB
MD5

9bf6ae988263b38ae6e59c8f1e99d30f
SHA1

0c5220598ee4f9d1a5fed3bd948d79ecfeb01849
SHA256

e445882bd238941ae744f5b78616d3d2d59103215a834f2a364c2addf266e499
SHA512

88d1e773f4efc44f39e6744c1a90b99b61934e4f8bacec8b490d8f9a063062dde047ea1818839aee002585782182be14a15c47608f56ec3a97b961da9e018b26
SSDEEP

786432:wP/4EkDI9kOhRk1Vpq8lzQqpNHtssueQe8muam9BH5eVazh2MVJmdb:989kOhe1V88lsqp3XjQe8mu/Lz14b

Score

7^/10

discovery evasion

Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

test.testy

description ioc process

File opened for read /proc/cpuinfo test.testy
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

test.testy

description ioc process

File opened for read /proc/meminfo test.testy

description	ioc	process
File opened for read	/proc/cpuinfo	test.testy

description	ioc	process
File opened for read	/proc/meminfo	test.testy

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact