10e76f9b66d07947eefe1e515379b278fe824c9b51a66b84bd5004f78e52702b

Analysis

max time kernel
8s
max time network
163s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
18/05/2024, 16:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
libni_511.apk
Size 346KB
Sample240518-va9qcsdc96
SHA256 c976d4e659fba141c3f62066dfc86f2efc5867c5bea3fe4f5a66837464a2e2c9
MD5 24a92786646bdbb29d4427d75a575b37
SHA1 c3c2d6cb3a3d7be841874a8c1bb4c11d4b157ee0
SHA512 57a7be47a4fd6a1725883735dd9f0c23dc450dc5a01df6d8039c21559c2d6dd23f11c11858ea2c671a7a15b4bb3d132e685536fd2298062bbb14a0932d82b7c0
SSDEEP 6144:6upxV+Cy0KmzwcUCWgzmqLq/cBg7/nIWzzuVBdfjLkFtebCOWz/HWMSRjFCXm:C0KgYNqu/ci/IMuzdmgCLHtSRjQm
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.android.providers.test

com.android.providers.test
1⤵
- Queries information about running processes on the device
PID:4288

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

fsdk80000.apk

Path /data/data/com.android.providers.test/fankingbox/appapk/fsdk80000.apk
Size 357KB
SHA256 141f31ac9f06ea991fb82fd7d89943e3d5bb80a21db970d2abe9a20069cb3467
MD5 5bda2e93aea9bb626c473df627d9a854
SHA1 678cc2005089efcaf3f80755c4cf3897e8bef07e
SHA512 edd765d4fbac3ab16b9d137163d449d6b10e6a37c9a89f04e082a23ff2ccc8310cce90312fc9abd9f08c2303efc8991ca96da1b26e64b396a34c90f642e6a393
SSDEEP 6144:zi0VTV+uy0KmzOcUuOgzyqLqjcFg7DnIWKTdNjLuP3efoOWT/HWoSfZeXb:ze0KgOZqujcO7ILTH0qorHjSfEXb
MD5 SHA1 SHA512 SSDEEP

Submit Download

libbatterysaver.so

Path /data/data/com.android.providers.test/files/libbatterysaver.so
Size 173KB
SHA256 705cf53466197ef73cb04d47aa3e8d6220d2e4e2e16d636cdd7a2531a7376c13
MD5 9de5cd1f3d5bb3862426d06ba4d0b3a7
SHA1 97bba265e060457d8d63d2d113995e6c6d063880
SHA512 6009c915e3e087f6d7301f6ee21533c6f1714572b849170fa19c40b92177d5719c177a6be31c1de40bbcc56c4b4c966fabd46e244eaf918949c0fe06ce5821b4
SSDEEP 3072:zlTdKTGkCjEgpMP35IGg/DX5ioxzLaTP/Hf+9YUl4SfxHS:JTdNjLuP3efoOWT/HWoSfZ
MD5 SHA1 SHA512 SSDEEP