063ad9be2707f780d907e3289306b5b1a76112d8e291696e3469e15c5cb763dd

Analysis

max time kernel
10s
max time network
138s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
20/05/2024, 12:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

LMC_8.3_Release_Scan3D_gcamapk.io.apk
Size

81.1MB
MD5

8269018aaa79eb79b17b8e3d9e708f47
SHA1

8d23e13da2f231f5a7fdc57e7177cad1403659ac
SHA256

063ad9be2707f780d907e3289306b5b1a76112d8e291696e3469e15c5cb763dd
SHA512

75a19adda2be4a93f6d5798df4c32d0edc3582fe7f31de284455221e0370e126d305d3caa15d05b64b33ffdfd6ba87c6a1bde2a395522eeb3de4b41de2a66d1e
SSDEEP

1572864:gNHf3b9BegK+yM7Ra+dYhjyOv3+ZDNdww9s4PIxNRFsWGcST99+P7O:kJB78+qEW30fPIxvOWGcSCP7O

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.samsung.android.scan3d

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4574	com.samsung.android.scan3d
/system_ext/framework/androidx.window.sidecar.jar	4574	com.samsung.android.scan3d

com.samsung.android.scan3d
1⤵
- Checks memory information
- Loads dropped Dex/Jar
PID:4574

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/LMC8.3/LOGCAT/LMC8.3_GOOGLE_PIXEL 2(WALLEYE)_2024-05-20_12-13-28.json

Filesize
903B

MD5
e4ba1dc80dd91f388b1e885d5ee03960

SHA1
8344e5eff38b2f149d31b4ad370463a4fb764823

SHA256
bc1fc594f4a3d8e779ded14de387bef9ff57121811e3fb4d98611027f635e8e9

SHA512
51c3710116d365c1b595bb98d8ac4373a10f42eafde29f7230be3de11823be3a25f841686bdffeb7d1819c9a49e0ef0cdbaff2e933aa5ecc92ad44cc5f311bd2

Download Submit
/system_ext/framework/androidx.window.sidecar.jar

Filesize
12KB

MD5
bdf3529e80318eb14e53a5bf3720c10d

SHA1
25c9ace4b1af6e80ebb2572345972c56505969ba

SHA256
bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

SHA512
48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b

Download Submit