fdd1066256bd556b93b9467db282ad45ad81ee998e749528026d9be4388e7a31

Analysis

max time kernel
8s
max time network
152s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
21-05-2024 13:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

TencentUnipay.apk
Size

1.0MB
MD5

88bddef489072b9ca39cc7a25d36d47b
SHA1

f2271e7d53eb9f9189061818aae46ef673a9bdee
SHA256

9f04a0be4fb98b9ff85e87e30ea7773d938d05c63ae06760b458d9cf97d05ad9
SHA512

500914f33b274f9c48333685698ccbc537734368eeb31b37e74f54354be2f48654c5810a6d79d794463f704972e3c88347b3298b7bb04b1c9348fcf06d213c12
SSDEEP

24576:A4/wLoTIH6bKalqw5zN5omfhagXDIxmfvrHrtTkXRc:A4/wLMR5zN5578AfvntV

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.tencent.unipay

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.tencent.unipay

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.tencent.unipay

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.tencent.unipay

com.tencent.unipay
1⤵
- Checks CPU information
- Checks memory information
- Queries information about the current Wi-Fi connection
- Checks if the internet connection is available
PID:4312

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads