Analysis

  • max time kernel
    7s
  • max time network
    149s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    19/05/2024, 01:55

General

  • Target
    QvodPlayerPlugForEasou_V1.0.15_v7neon.apk
  • Size 5.9MB
  • Sample240519-cb6qzscf57
  • SHA256 ed12e447ee2004de2638ece78a071e73a04a4df98009681eb96b2ae925f0aca0
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.qvod.plugin.for_easou
    1⤵
    • Checks CPU information
    • Loads dropped Dex/Jar
    PID:4301
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.qvod.plugin.for_easou/app_dex/jackson.jar --output-vdex-fd=46 --oat-fd=47 --oat-location=/data/user/0/com.qvod.plugin.for_easou/app_dex/oat/x86/jackson.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4331

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        jackson.jar

        • Path /data/data/com.qvod.plugin.for_easou/app_dex/jackson.jar
        • Size 315KB
        • SHA256 738fc4594e5bf80283d85e29715f32db98a131b1692ff87d89cbb38d1ece2cd3
        • MD5 SHA1 SHA512 SSDEEP

        jackson.jar

        • Path /data/user/0/com.qvod.plugin.for_easou/app_dex/jackson.jar
        • Size 747KB
        • SHA256 c1642349a3376c7fc5e368912a8c702738565c6db16646b4d5afde7659688ca4
        • MD5 SHA1 SHA512 SSDEEP

        jackson.jar

        • Path /data/user/0/com.qvod.plugin.for_easou/app_dex/jackson.jar
        • Size 747KB
        • SHA256 acabec1e9855095b0c072aa70434e1980a73742b71c637dedcd84d70191818f1
        • MD5 SHA1 SHA512 SSDEEP