Analysis
-
max time kernel
124s -
max time network
179s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
21/05/2024, 05:31
Static task
static1
Behavioral task
behavioral1
Sample
app-release-xjtwms_3.5.2.apk
Resource
android-x86-arm-20240514-en
General
-
Target
app-release-xjtwms_3.5.2.apk
-
Size
8.2MB
-
MD5
ffe2c01f8b01f24024ac30dd3fae2928
-
SHA1
d81ffb305e08ec2a74e0a5f7fcb81ecace2dca85
-
SHA256
33de507f2e632fd8a67e221611c8cf36e5cb313d871200d7b2c0cecca640d593
-
SHA512
3fe450a0ad3f9e1aa11a576f62ed4e18d7a43b87104274be8736f35acb0ff4e06cafecdf549bd9ed914477ce6181d942d651016eb384f5eda996ffd0cc297528
-
SSDEEP
196608:sQcWnn0R1T8KMHWf2JPyl1Um/t0AIXxNEwszmh+ZdsC03RZyUHFrG6:d0xnl17eLFh+ZdR0DA6
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 1 IoCs
ioc Process /sbin/su com.xjtwms.www.wms -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.xjtwms.www.wms -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.xjtwms.www.wms -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.xjtwms.www.wms
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
229B
MD57eb6d57f578698ba8dfcbd92fb6ba173
SHA1739b5bff8e4e43dcf31b4345855eb2949ec90292
SHA256b0b34386437168356a841d25433432c9cd46ef4441810d28fdde0267d856a464
SHA512f49770f14e00b2713d374ee9c9fd0e7535e929ed61bd76b4b13df0db82342a6fce063b5073ceaeebb3385649bc0fd8dc4888bebf983210e571fd0112a5b7149a
-
Filesize
58B
MD50d210bfb2a0e1f1b4c082a6a0f79de07
SHA1bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD52c2e121c16eb0722eee6f867c74b9a81
SHA1b332d594259ec39a9f3db9a3fd0980bd33e43873
SHA25656b51366aa08a534f557c37102f29df877d737a7af4af7029239e77f22e12aba
SHA5125492afa5ce73576b7184d76f0828a5de02141cba5cc4aa816ac3155daf0be0395baf0e04acaff47d2c0589f44f37da546781456575db11614f93c51bb386df26
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
84KB
MD56308ccfb1819440dc78af4cbb60e3348
SHA1472f0d0938c2a17d4f4265c59b1aab4f2a1894f7
SHA25623cf37b8956b0327b7292d20022334e261145806a777552b87f1ba9accec9780
SHA512bb2dd5bec1bd6b2112f44fada8c0d307ba012f41e0c1c42ff405a1218c823a11341b13bf44bde6b0c87b4d4baf968d82e49efabe8bf0e659a3488ddce60af884
-
Filesize
13B
MD5af406cf60ce0ff6e515175e4f6467fea
SHA19e28ce40df2454fe5ad08c683255217d512fb9d6
SHA25695e1260b5a6ada3430397098a64f262c735f55792099b749eb71517c5977e807
SHA512fd3e9a1fd25bfd2ad3b9162934c1251a41153b85ef66203f1715607af439559fc31582a34af1cc9f6188e2d3fb6cc0c1bbc78bb2b8e851fa228eaee2098912ce