Analysis

  • max time kernel
    174s
  • max time network
    193s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    22/05/2024, 04:30

General

  • Target
    muzhiwanapp.apk
  • Size 6.7MB
  • Sample240522-e43k5sca89
  • SHA256 efa8e431c5d5b3bda3cfc0da4392d14ef447643412bbea22536a155c7aae82b4
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about running processes on the device 1 TTPs 3 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks if the internet connection is available 1 TTPs 2 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Reads information about phone network operator. 1 TTPs

Processes

  • com.muzhiwan.market
    1⤵
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Checks if the internet connection is available
    PID:5155
  • com.muzhiwan.market:mult
    1⤵
    • Queries information about running processes on the device
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    PID:5199
  • com.muzhiwan.market:mzwlogservice
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    PID:5253

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        mzw.apk

        • Path /data/data/com.muzhiwan.market/data/mzw.apk
        • Size 17KB
        • SHA256 d0990058e5204d1a1bde2eff40893cb49d1e8972ee9b7e1b03ae35ac3cd5df8b
        • MD5 SHA1 SHA512 SSDEEP

        notes-db

        • Path /data/data/com.muzhiwan.market/databases/notes-db
        • Size 16KB
        • SHA256 bddb108ff2c0d509cd953c8dfb2b7c4e838d205291a4da8ab6c65cb98986416e
        • MD5 SHA1 SHA512 SSDEEP

        notes-db-journal

        • Path /data/data/com.muzhiwan.market/databases/notes-db-journal
        • Size 59KB
        • SHA256 2514431fe50d909ac1385e07341ed8878b5f2400df151df5a43a59b98a31ea02
        • MD5 SHA1 SHA512 SSDEEP

        notes-db-journal

        • Path /data/data/com.muzhiwan.market/databases/notes-db-journal
        • Size 42KB
        • SHA256 7a28fd857e1283e351d37931cc6e23cd6de5ad2fd4d3d23337a6f162b07f3978
        • MD5 SHA1 SHA512 SSDEEP

        notes-db-journal

        • Path /data/data/com.muzhiwan.market/databases/notes-db-journal
        • Size 42KB
        • SHA256 14b68457395896d3ffe12b777f52fe2cc4182a6c9ba383555b12522c93657b00
        • MD5 SHA1 SHA512 SSDEEP

        install_file_dir-journal

        • Path /data/data/com.muzhiwan.market/files/install_file_dir-journal
        • Size 1KB
        • SHA256 07b90e7fe3b00d6ad217d729f6272a16ab3f1ab109b8dd6abd439a11eabc80f9
        • MD5 SHA1 SHA512

        install_file_dir-journal

        • Path /data/data/com.muzhiwan.market/files/install_file_dir-journal
        • Size 2KB
        • SHA256 7751c431336bd615a76fe1fb9ccfc17229f12fa5561e2e2a85fd13de34db78ae
        • MD5 SHA1 SHA512

        .systemid

        • Path /storage/emulated/0/data/.systemid
        • Size 5KB
        • SHA256 b694abb4a56699542e20d3b3a38870dc1366822ebdd30abaa321f66cfab4bd97
        • MD5 SHA1 SHA512 SSDEEP