04b4a9000f8935c2cc63b751c6b91f13cf1e796432d32e80ae3c8e474b902f39

Analysis

max time kernel
179s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
19/05/2024, 22:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

04b4a9000f8935c2cc63b751c6b91f13cf1e796432d32e80ae3c8e474b902f39.apk
Size

933KB
MD5

fc31703b08031ebc2eefec5d70763807
SHA1

6b32a1b35f2cf2bd108e07288390cad70f4b6f37
SHA256

04b4a9000f8935c2cc63b751c6b91f13cf1e796432d32e80ae3c8e474b902f39
SHA512

bb5b2c32d58f0f185ffe271fc2319bf0ce24b78fb39a943b7b5f0d13014c036a8f15f632da2d4c2fa4275cb06baa2ef4165abb52b0c3c2fa964eeabb86334512
SSDEEP

24576:O/Mg/1BUjYiJtWK1Eja6TAqy/6PlS6SpJyS/HZvG:/gNR+t1EjTsGms

Score

8^/10

banker discovery evasion

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Requests allowing to install additional applications from unknown sources. 1 TTPs 1 IoCs

evasion

Code Signing Policy Modification

T1632.001

description	ioc	Process
Intent action	android.settings.MANAGE_UNKNOWN_APP_SOURCES	com.spacex.runner

com.spacex.runner
1⤵
- Requests allowing to install additional applications from unknown sources.
PID:4203

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1632

Code Signing Policy Modification

T1632.001

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.spacex.runner/files/profileInstalled

Filesize
24B

MD5
7985e96f22efe7173a8b4428eac41500

SHA1
1720af1da746d7b1f8d36144e324075f992f6abe

SHA256
e62dea52e36a197a9088d4ba33fa3906d855ea1ebd8696058512b08e49da9353

SHA512
ddfb9d4d1851f7fe6bf068bbb6d7346f8de6abc7ecfec44700b3b0ad96ddae8ee3860eacec08cf870faf3353d98ebca677fa3d265a83ff9ce00b4a536be8b32d

Download Submit
/data/data/com.spacex.runner/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
8b727a7e9009ef3bb83d161cd41610f1

SHA1
9e46198ba267aab7e72743b9faee6a5016ef3232

SHA256
abd585b7a03d18bb51355a9c02a8f7f746bfb9e2e5a6eb8a7da3609015d5d37f

SHA512
14ec5f7f23811d9e0c70f9f05ab9c9990425c4bebbfe043b3a67f13c1197bd9f755a4a49999076b092a6187be66c89c6a3205cfdf2c83f6fc44436e4a2907079

Download Submit
/data/misc/profiles/cur/0/com.spacex.runner/primary.prof

Filesize
468B

MD5
a904cca0007b564ab23550068b91a4aa

SHA1
14d78d938e6a270b7012b272fbc4a8e8e5274b7c

SHA256
7f1dfbc2c757dc2e552a905730b78438b82f0b67576b05c970b1b856a35951b2

SHA512
3e74c5414f72912d31028b22426eb7689c1daec3d89b0c88fea9ad9561227a73b76f6035961ca81c44ebc0fdc1c3765592118acb5af5515bab7ea4a11cda83a1

Download Submit