a3a30aa5bef8c0f5f7a5c80d5a2af708d2283a61a37c202b1af494782ad7f88f

Analysis

max time kernel
179s
max time network
177s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
17-05-2024 02:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

stasdk_core.apk
Size

868KB
MD5

548a355e9ab43cc847930638ec1bdee2
SHA1

8e8d50b35d5059f91fe65d6829ff5dcad50aaa95
SHA256

bfb26b7f54e142193e59a4f7bc9b796c3d745cbe02cbbb670af417cec2d1e044
SHA512

6a7f1da871115347a90fe4c0cc6851239e4b96cb128a202c658b914f1036bd7dd7aae17d041b8a025c2645595972957b044eb5aa3d83f9852c8f0ccba4a0f46e
SSDEEP

24576:+zNimmnQFNSxDWoDNMWaY3Axlb6d6ZX93:kL+QF4N1aYKAeXB

Score

7^/10

discovery evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.muzhiwan.stacore/app_e_qq_com_plugin/gdt_plugin.jar	5209	com.muzhiwan.stacore

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.muzhiwan.stacore

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.muzhiwan.stacore

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.muzhiwan.stacore

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.muzhiwan.stacore

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.muzhiwan.stacore

com.muzhiwan.stacore
1⤵
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5209

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Process Discovery

T1424

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.muzhiwan.stacore/app_e_qq_com_plugin/gdt_plugin.jar

Filesize
142KB

MD5
f0b930680aa93a62bb77d1916e64a3d7

SHA1
fc30b5641b8d32e4efeaf409d07a4d520a95a6da

SHA256
8f109682334d43d811c7d56620c5eb30c9bc1a89f3f36b91232aeb142a6f6ba7

SHA512
2a503f3aefd5ed8634dbc85cd952d10625e4bc18badc0661c7cfcc3345cfb43ba1e153d9fb264703e4cf0d6c40ac601942e841b9537125072f884c283adb5b99

Download Submit
/data/data/com.muzhiwan.stacore/app_e_qq_com_plugin/gdt_plugin.jar.sig

Filesize
180B

MD5
b23a77c1c0b865c67e4fd0ca80eb41d1

SHA1
e290e2dde37e0e2f6b1274f0a69ac4ed0d26af37

SHA256
142c0b3bab77907907546d3f17089585f1086f7d9711bef8cca9175ea659e26f

SHA512
b93447f22e7bc98a663e3c9f7a8a76cc1c462ca6288deca746256154d61ac58cd54cac199e3462a33ccfce1c43f3ff6a93b15dbf7e1fd0421632044b29213707

Download Submit
/data/data/com.muzhiwan.stacore/app_e_qq_com_plugin/update_lc

Filesize
4B

MD5
dce7c4174ce9323904a934a486c41288

SHA1
e117797422d35ce52f036963c7e9603e9955b5c7

SHA256
0c030586945fe504b604ecc2e875c38ede400cd5cd73da9730302162e6b02c6f

SHA512
d570ab6a8f4a7b54d426b0481219074b5277ace37d88438d87ab97eb387938eca1cf7b09fa42d596c56ada860710d2a7385d2a96e1cedff58ad6ed8900f1b143

Download Submit
/data/data/com.muzhiwan.stacore/app_e_qq_com_plugin/update_lc

Filesize
1B

MD5
0bcef9c45bd8a48eda1b26eb0c61c869

SHA1
4345cb1fa27885a8fbfe7c0c830a592cc76a552b

SHA256
bbf3f11cb5b43e700273a78d12de55e4a7eab741ed2abf13787a4d2dc832b8ec

SHA512
91972aa34055bca20ddb643b9f817a547e5d4ad49b7ff16a7f828a8d72c4cb4a5679cff4da00f9fb6b2833de7eb3480b3b4a7c7c7b85a39028de55acaf2d8812

Download Submit
/data/data/com.muzhiwan.stacore/databases/GDTSDK.db

Filesize
24KB

MD5
c350d05c3d4943baaf1accd6a39a18d3

SHA1
9bea162acc14706bb032be98e7a42dbd22d3d325

SHA256
2515f5e39ad8ab880de32bd4667da927364e7f0a492876ba4f91819bded63b9f

SHA512
cf8b698adaeba68c20015b951f1cf3e8a85361c9ef7e27dcdee1cea6310023eece05519a26c95e6b9ee369f2570584c3be69ddff3fb1e4ce65b40f89a45bdfac

Download Submit
/data/data/com.muzhiwan.stacore/databases/GDTSDK.db-journal

Filesize
512B

MD5
977b584b7a3640e4eaa6b9c0812e556c

SHA1
f208b88fb468033498a60df723475ab6d0303bc6

SHA256
dc1a9f88afc521036155904bd8f2264c9f210320ef75c72e9dbbef098523afb7

SHA512
b828efcfbf70eb3f1a3bcd7a6d14f1d958a105ae687808b3e8b357bc4aff86b6517439cb79c101a569dd696174af56319eab7250d3542f248eeb517ef3d5377f

Download Submit
/data/data/com.muzhiwan.stacore/databases/GDTSDK.db-journal

Filesize
8KB

MD5
1ba5ef16dc2d14b20e1879a00a332b4e

SHA1
5506ba7eb8f6a2a144ef76f4a3c4b591c76de27c

SHA256
7e372af7998e4916501357f84b1b9dfbe8699974234089acd504ae710593d686

SHA512
e5ce341e543f5d24e699c7ba73c1202a0a02de3f76f2102c204a6d1c48bd8fdd45da2b6fc9563b47ff0c83ff73fa66010f20f90336bb0d495da91993bb2c721e

Download Submit
/data/data/com.muzhiwan.stacore/databases/GDTSDK.db-journal

Filesize
8KB

MD5
c46a53a0f10570de59d507fbb5e81840

SHA1
a9f06b6d8d0bd1f6cfb27fb95e9a24c916eff98a

SHA256
8ba2be3dd8b863a9c00e0d95a09e557c200027eb413c1d25a00e0198911a2f3c

SHA512
713208daa0c70d846e8ffeb8d4e5800d9d16cd475ff382ced47f9cab22314a8dc20f1c0e1884adef0a94bf8be2766306116e25ae232535d938ebda4403e8f33c

Download Submit
/data/user/0/com.muzhiwan.stacore/app_e_qq_com_plugin/gdt_plugin.jar

Filesize
336KB

MD5
798f10a662a4848ed33d16790c751355

SHA1
4198fc8cb89d53e338c2bf12122cb4f53183513c

SHA256
6f52b12d38067a97b22917660e919d36232b409c1505dee37233cf7bdcc12eea

SHA512
70beba592750c2d9ebda28b13378a82b2ff7d0e39d0caff0529d8e3ae7c23eb3b243ecd82bc132b1c12b354e8b171e589bdd846b169e955607e11a87c362957a

Download Submit
/storage/emulated/0/data/.systemid

Filesize
36B

MD5
7a76283a16b1f0b9e43a95d01f400ea5

SHA1
9fa6a5596ef96588940f2fe1f3d277062923085a

SHA256
1e6c99c0b27cd661a243b3c058188efa93315f96a4248042a66aef51e3fdf42a

SHA512
16d2d04a85713041a5b5ae7fb3c7efc8c88885b44a3758d24e9e023583460562f21c0195dc93bc5559cf8ad1ee057294f009474af8228e22a90e3aec6743fff9

Download Submit
/storage/emulated/0/data/.systemmac

Filesize
17B

MD5
0f607264fc6318a92b9e13c65db7cd3c

SHA1
c1976429369bfe063ed8b3409db7c7e7d87196d9

SHA256
c248c629af1fe0a8c46b95668064c1d2952a9e91d207bc0cc3c5d584c2f7553a

SHA512
9dbd40b135b46c7be31b8c7d11c75b0b179af3a6550fca52ec447583aeb50aaaedb4b1e9373cf8826615149549a2efaee04efdc9a282e3a6b387c73099c13fb1

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads