7e4143dd27644a0aedc66130c2a0a56e7aa556e75135f2c6a40c1106228e3fad

Analysis

max time kernel
5s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
29/04/2024, 01:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

7e4143dd27644a0aedc66130c2a0a56e7aa556e75135f2c6a40c1106228e3fad.apk
Size

1.9MB
MD5

1f5c2daab9da9349c61abe950c661aba
SHA1

6da1a8574e1cd927a139c7be328b867c243070d5
SHA256

7e4143dd27644a0aedc66130c2a0a56e7aa556e75135f2c6a40c1106228e3fad
SHA512

cea9bc240975e13c373125dfe83ea6aed144f11e7935282669a74843b464d8fc2def552c07e48286a69b2350182ba644fbe994cec546fc52dd857c5bfabadb6c
SSDEEP

49152:9//SRcduCkmkYwPxtlOHiPJ+PSD/yS+0VTWtHubvw8wiOZSmKIM7:VKR8uCbkX5ss0PSD6ECtObvXwiO4N7

Score

7^/10

discovery persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	kisi.com

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	kisi.com

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	kisi.com

kisi.com
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
PID:4212
- ping -c 2 -W 10 -v google.com
  2⤵
  PID:4291

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/kisi.com/cache/~test.test

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/data/data/kisi.com/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f20b52b0e352bec593300afeee18cca9

SHA1
da26d417c0cd925c6c645a478998e482bc6a9ca5

SHA256
4a9a76e0f0d9174e50e556a3f4b5cc0c7e8b2d046a15daa73b4db27b501c9746

SHA512
150870da49c55ddd477466d634945260b525b1e0f442ab980de8663fe179b08e5f4c105860a73148d8c57c997b374eae35c447b8cfde067cde873af37f8b2e58

Download Submit
/data/data/kisi.com/databases/google_app_measurement_local.db

Filesize
16KB

MD5
02edc9ef0f6e833889643def559c44b6

SHA1
eb9ad314884104bab117f8195c2a5a88db3de8b5

SHA256
b4088b4b8e0fc519f5130da663e81d91fd5ae4e5339118ddd1db5f5ceb7a8bbd

SHA512
fc6a0cf986f23c1232ee9e7e314de03df0120a04b7c0ed50d5b66f5586a68d2c54a8a924e8486bc3d27182c19432dc9108281aaba3d20b32d64286cf89f73b17

Download Submit
/data/data/kisi.com/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e2bcee1689f340268c4f5c6dc7f06234

SHA1
109b93c3ad140764153247b55560ee5f6ba464c5

SHA256
377ce4cb38364cf62d51267bb9012cd722b131378c8a3dfccee9cdb7bc0a9833

SHA512
fe239b54c0f5ddd4e22a9b123b61a298fddda9da07f847940bc3a03725da7e1aa01ebd8901a67cea6027bde424b5ba9155c8c7120e994ea299c268ef173f4be2

Download Submit
/data/data/kisi.com/databases/google_app_measurement_local.db

Filesize
16KB

MD5
0bff5bb867cbabbdc4ade9099f5d382c

SHA1
0d57edcb96b8ad06554e9f9e9d7d8196c49fc1bf

SHA256
46df8f46a4e1ef2a59f7b97ed05572c61d9b59c382a5afdd8288bdfb195f1490

SHA512
4319600dfd0c1fa33395091b238af6df6d6bb53014b3956a3dff93039cb186989f1d562f19fd59dc42a702d007b3b4a47a988aa250272568bc0642bef6248b71

Download Submit
/data/data/kisi.com/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/kisi.com/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
038190c06435aa33bc182a27bb187da4

SHA1
e0db7d74515687a768b65a7f704899f33c8a815f

SHA256
adb09bf82f2f23b6095471d3c0cddaff1d7c7d337eeb0c95808d8a507a2cff4a

SHA512
91183ce88b44555b395941e4bf87781320e7807b1cd7f064b5146fd5d6c3273844512e6d45c53157d8eee4f00ddf5ee393481842037162a8fc570eda67cd7bfb

Download Submit
/data/data/kisi.com/databases/google_app_measurement_local.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/kisi.com/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
82b57b83524be2dc01e134ed2c87504d

SHA1
2acabb317eea908deeeb9757609ebc650683450e

SHA256
938eddf0a0716ce9d785dbc83f7aad8031efcafe22d6fd7503ac9478a3cfe07c

SHA512
8ba1ab65365995308ecaf45d5064a532be04bb9ab2fc103a8519e9edbea7085127582349acd22f96346825f0b45beab523727fcae5ea06b917d8a04f046986f3

Download Submit
/data/data/kisi.com/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
3d977577673e17fa6c3e08b42864e142

SHA1
0986c20b430e3c7d4770814b00816c3d0effbe54

SHA256
87210914c6e71773a33a780b0a950075f285f6ae9cba0b741e82a8debedfb84d

SHA512
e613cf08820f87a9bdc8bddca30760b4570e3fa1c1c899e502c20e2bc882c87f0ba8e2b6705bba2c67139e425983018564172909e7065d266904f84227f06076

Download Submit
/data/data/kisi.com/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
c5ce1bcc89e2cf8d3b5eab7abec87e35

SHA1
10c71241f353babb57d4da5268cddb80d2efac11

SHA256
15779e3b0d658bcf7c2a38ef2aef46bbd3facdc6e14f950db6140d460da3e0a1

SHA512
c554cf9bab615f6a08f29d33c365517076f52af34228a970fc56be7573da24fcd054e76467cb4bf4a340bfa7350c68cdfb13a1f32b6c0fcabae75d793390bdd1

Download Submit
/data/data/kisi.com/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
c9d4a678d1620928bb0308a2aea8aa94

SHA1
ed5eb184810e4ca2cc8aa5ed0c6e3ba3301b6519

SHA256
b7045efdea29b4d88148fb3abe721099312c2c7e40b3dfd710252b331dfca328

SHA512
d429a39f8d362cb9f6ba7f0b365f6eba316cc845942db9e620e189e286e8fe5fd2a773aa6705bf4bf052fe94df985a2cbc836c9cb63e60ef3c530350efee0e67

Download Submit
/data/data/kisi.com/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
65d277c7379a0ff58ff5d22e5e0e6cfc

SHA1
5bd1da8a1a49a673e0505096e8fe5d0b105ec4dd

SHA256
b5bc7d9333a4c3999774b5c333d98a9ce922821a6cc2b3dae7bb55935cb05078

SHA512
e465f4f5601191a25a5132a9aec9c3c4eb908fba87f8a130ca7eb44e4b9590abf816780c7080bd870dd123ed458ea7dc59b7a1addad313013d6e4ad0c67e9463

Download Submit
/data/data/kisi.com/files/PersistedInstallation4012921568988120674tmp

Filesize
90B

MD5
99d3caf40fe25d67a9ea83960d68aab2

SHA1
645051140e97b2c3517f91a09b7e427e0db34c6a

SHA256
a109f25d931a00896f6013d2e0e88020400c9fc3cf2befdb209baf05608fdb15

SHA512
e6ed00b39121e87210603c67cd803325af4936a6dba27711e865f666a39375d4607b67b2d862e0de5d391e87f8f1c6b93dda49f1d6c805aa2bd1f65c498b587b

Download Submit
/data/data/kisi.com/files/PersistedInstallation6457265035023799218tmp

Filesize
573B

MD5
6fcd51df83a843b10936a8fffebd85f4

SHA1
09e4dd706dcd9982314634cfbb54bd9639218c71

SHA256
bf21cc4b9f42d2819a29617f984d8fdfb311543536d1c041bf53e843673c2192

SHA512
f1b8c7697805ad6c26054d11ce17250c2f7958962a09e5b6567fad3d2dc88b77453a0d9c01de303a5a3652985d45ecd7fa05f0421eb4969c0b298be63d7d4052

Download Submit