063ad9be2707f780d907e3289306b5b1a76112d8e291696e3469e15c5cb763dd

Analysis

max time kernel
11s
max time network
132s
platform
android_x64
resource
android-33-x64-arm64-20240514-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240514-enlocale:en-usos:android-13-x64system
submitted
20/05/2024, 12:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

LMC_8.3_Release_Scan3D_gcamapk.io.apk
Size

81.1MB
MD5

8269018aaa79eb79b17b8e3d9e708f47
SHA1

8d23e13da2f231f5a7fdc57e7177cad1403659ac
SHA256

063ad9be2707f780d907e3289306b5b1a76112d8e291696e3469e15c5cb763dd
SHA512

75a19adda2be4a93f6d5798df4c32d0edc3582fe7f31de284455221e0370e126d305d3caa15d05b64b33ffdfd6ba87c6a1bde2a395522eeb3de4b41de2a66d1e
SSDEEP

1572864:gNHf3b9BegK+yM7Ra+dYhjyOv3+ZDNdww9s4PIxNRFsWGcST99+P7O:kJB78+qEW30fPIxvOWGcSCP7O

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.samsung.android.scan3d

Loads dropped Dex/Jar 1 TTPs 4 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.extensions.jar	4329	com.samsung.android.scan3d
/system_ext/framework/androidx.window.extensions.jar	4329	com.samsung.android.scan3d
/system_ext/framework/androidx.window.sidecar.jar	4329	com.samsung.android.scan3d
/system_ext/framework/androidx.window.sidecar.jar	4329	com.samsung.android.scan3d

com.samsung.android.scan3d
1⤵
- Checks memory information
- Loads dropped Dex/Jar
PID:4329

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/LMC8.3/LOGCAT/LMC8.3_GOOGLE_PIXEL 2(WALLEYE)_2024-05-20_12-13-24.json

Filesize
987B

MD5
ce84fd3c4b84d421149c0569ac762302

SHA1
30d3b80acb062640bb1ee1ec04216829fa704560

SHA256
6a4cd6b0a9f150920bb47c5abb2ab20164686d58f6c0fa9af1dc26ce0ffe0350

SHA512
f4625dec1856e0ff7bda943119f3c8d8614ee2ebee57f3cb919c1cbe829c21135855755c3fa42e754b91e0546ebf33eedf8eee736f54318e741749cc6e6e7c40

Download Submit
/system_ext/framework/androidx.window.extensions.jar

Filesize
123KB

MD5
3056e1bdb7d4e19789d0319eff484bd0

SHA1
6791ae47aa9466fe0bca27ad6643f846853bbee4

SHA256
8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0

SHA512
c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658

Download Submit
/system_ext/framework/androidx.window.sidecar.jar

Filesize
25KB

MD5
29469324e59dfcc052f24b5af4e7b2c4

SHA1
10c1e17ac6f598037bb51baa07945663645de4eb

SHA256
9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a

SHA512
5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2

Download Submit