Overview

overview

7

Static

static

6

CANARA BAN...YC.apk

android-10-x64

7

CANARA BAN...YC.apk

android-11-x64

7

CANARA BAN...YC.apk

android-13-x64

7

CANARA BAN...YC.apk

android-9-x86

7

Resubmissions

23-05-2024 07:38

240523-jgwxashg5y 7

23-05-2024 07:03

240523-hvttesha21 7

23-05-2024 06:23

240523-g5t2hagc61 7

22-05-2024 03:55

240522-ehay1abe3w 7

Analysis

  • max time kernel
    26s
  • max time network
    154s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22-05-2024 03:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    CANARA BANK AADHAR KYC.apk

  • Size

    5.1MB

  • MD5

    d90a6ead45b6e5149c7c64217cca51ac

  • SHA1

    47b658b064cf3fad14194dced9145ef33b2bf897

  • SHA256

    afec45c1051376d3e8fc57ed5bbe33cb619ab71c88ee20920bb1384ee5c6ea54

  • SHA512

    59ec7e7ecb83e0e29959ee74e278b4944b2bb2cba9107f159c93063464af2da92427b0391ba033a3c4caa3ba327032e2922d57f2ed507a513f1c0e44daace85f

  • SSDEEP

    98304:XKMrJZC1oPBy7ESY173tT9dXKzr0kqqy7jtLtqHgwX3PmMLtuxMDyICcLcOT:aM7oETtTXEgkqrRt67kquIGE

Score
7/10
discoveryevasionpersistence

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

    evasiondiscovery
  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

    evasiondiscovery
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
    discovery
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence

Processes

  • com.my.newproject50n13
    1⤵
    • Checks CPU information
    • Checks memory information
    • Makes use of the framework's foreground persistence service
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4205

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.my.newproject50n13/app_sslcache/update-ua-13-default-rtdb.firebaseio.com.443
    Filesize

    8KB

    MD5

    1d652111756127c9a085b070874310ef

    SHA1

    ab8d0741eb5eaac3ba76c9d1af6d46a22ef47214

    SHA256

    1d50c152b2f6aabc005d7cb88f6c3bc3bd42df5417d5714ddb0800f413389117

    SHA512

    0f492f565699540ca0a704d731dfe96985e208ac2bb29d3f32368ad82b872ef0d2a2d6229f517d02439db6074b08d366eaf038ed1fdf70dd37acf94fbb3792d5

    Download Submit