2146bfbd633871467b0dc3e27ec905e12d31b050b0fde30f004b36a2dfc985bc

General

Target

swccapp.apk
Size

7.7MB
MD5

44ad31472b9e90d30bbf32eeda5aadfc
SHA1

618d2a7a6afb4fed48544a242415cd2fe59ecb8f
SHA256

2146bfbd633871467b0dc3e27ec905e12d31b050b0fde30f004b36a2dfc985bc
SHA512

5c84db2015aeaca8c4c37ad7bfe3e7e01fc20f5b7389a259db754bb92bee9b47892ddbad8604c85b889865b2c2150c61be78e59e11dffc95856ab6b21186db63
SSDEEP

196608:GBoUYft5GMqoOcHaYEmyxx7gVZPYD0zGmULMdQ:Godf+KOktyf1JLt

Score

7^/10

discovery evasion persistence

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.shubhamworld.location

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.shubhamworld.location

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.shubhamworld.location

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.shubhamworld.location

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.shubhamworld.location

Checks the presence of a debugger
evasion

com.shubhamworld.location
1⤵
- Checks CPU information
- Checks memory information
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:4269

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

1

T1624

Broadcast Receivers

1

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

2

T1633

System Checks

2

T1633.001

Credential Access

Discovery

System Information Discovery

2

T1426

System Network Configuration Discovery

1

T1422

System Network Connections Discovery

1

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.shubhamworld.location/databases/cordova_bg_geolocation.db-journal

Filesize
512B

MD5
76c1e70dcb026ed960fa2771ac6333ea

SHA1
57e88217f669d566804c6f071ddc36d2dccaca0c

SHA256
8c7ab2af74374f053c034588242c83116b434e5c11c4586a8200e18967a49158

SHA512
c42f31c0c589ed27a601fc60999c51f73860cbf1518cff66bd8117364cca69d0d27a1247e6df9e8cfd0d6b2c09bdc941e587828c442e3d21ca5a131e8d145168

Download Submit
/data/data/com.shubhamworld.location/databases/cordova_bg_geolocation.db-wal

Filesize
40KB

MD5
3ddb76c5eefd5790678d789ae55b36a6

SHA1
c89fdfc22bc9fd8c7c99982992b4ada05940fa8b

SHA256
0ce20c469d7690af48aaa58e6b90558393e854d380cbdebe8b0aa8b0e8bc0e90

SHA512
d4e7cc1260a579cdd66a6241473f44d9f91d7ed8127363fd3838204073e9b1daecf70c48a8931f44557b5c7f2f1da7b3b77b0aa18439200a09b5969b5979368b

Download Submit
/data/data/com.shubhamworld.location/databases/logback.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.shubhamworld.location/databases/logback.db-journal

Filesize
512B

MD5
f89386dcaac13e9c4695a009d078485c

SHA1
3a67a2c36afb971816743ac8314dc14da93a889f

SHA256
8a1799d9913478c746aaf8c137a65fd60d7c6f0d8d802683e8bec85babb62096

SHA512
4cf1ea09f2703ac5efa66b05a03186bfe0925b4f5a961332f0c873152f6d004d97d1ba21f37b30197877311aa3a3d8dd8a5ec23c1c3afbc213bd0374b5f7241e

Download Submit
/data/data/com.shubhamworld.location/databases/logback.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.shubhamworld.location/databases/logback.db-wal

Filesize
96KB

MD5
ba524da965cc77c01d4607648eb0be20

SHA1
5e3bfbd0b2dba0c4a7d63d24d9d255490d3c7a0a

SHA256
a9e48b8e0c0d07890f4b26676c28741879dee267aaeb5e6285a81a56ae132858

SHA512
ae2bee3883599d3cd0f2e03ed54099670bffe4cedefc7f13013ef816f1b2a76c85acc6ff0e4b9601310f9a6eeefc1069d735a36e031421ff4f3e44e0ec9cb643

Download Submit
/data/data/com.shubhamworld.location/databases/shubhamapp.db

Filesize
8KB

MD5
1d79c1e92f3918cb6c1c8e597575276c

SHA1
a13d17964d6431d145af6a5ce0a8c401b90df25b

SHA256
51448d205033d0b2768c0c652cb7753ef66b45674f9666167a2a6d78680d86b2

SHA512
d7cd79613b1b0b491157ec6ecc771ed10715ec9ac3fd3b6fbf89fa76ed365a7f0e9987222da428a7edf469b56d8594ca055da94656aa73790249b902166ee855

Download Submit
/data/data/com.shubhamworld.location/databases/shubhamapp.db-journal

Filesize
512B

MD5
91beb69ddafd9681b46dac42cdbe602c

SHA1
9bba2c27572c128c5654a7bc40d8ada02996c022

SHA256
661a472fdc81ba2d0d48a6b01fab7507198617e3a904bddf12a13cbae4211c7c

SHA512
834854f29b71f90b09f2b4f32a295ecae5fd6da97270761368fb1d76e17952cdf9a77fc5e7e18519ff748e2b111484f6d229082c6b3b91fd9a49cd840f10e601

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads