Overview
overview
7Static
static
1apk+.json
windows7-x64
3apk+.json
windows10-2004-x64
3base.apk
android-9-x86
7base.apk
android-10-x64
7base.apk
android-11-x64
7split_config.es.apk
android-9-x86
split_config.es.apk
android-10-x64
split_config.es.apk
android-11-x64
split_conf...pi.apk
android-9-x86
split_conf...pi.apk
android-10-x64
split_conf...pi.apk
android-11-x64
Analysis
-
max time kernel
306s -
max time network
339s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
22-05-2024 05:43
Static task
static1
Behavioral task
behavioral1
Sample
apk+.json
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
apk+.json
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
base.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral4
Sample
base.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral5
Sample
base.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral6
Sample
split_config.es.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral7
Sample
split_config.es.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral8
Sample
split_config.es.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral9
Sample
split_config.xxhdpi.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral10
Sample
split_config.xxhdpi.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral11
Sample
split_config.xxhdpi.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
base.apk
-
Size
3.5MB
-
MD5
193a62dcd89032dff96dcd0c6a756e69
-
SHA1
104b70fb2f8441ab335cf9cb4fe0e607e2cbb575
-
SHA256
b1716b11437276c5ed72367862010bd399b382e790d0ec3e77fa51a6c421eb5d
-
SHA512
751db3f074513ef1ac468ee54130203ba5a61cda79f7f24b73a2e4e665155aab3684d8a82e46b9df550806e3722324872662b5df5684468eb5ce3d75fc850f10
-
SSDEEP
98304:1OB/VsYoPDoq9sEpoMPtqTuqL7g/sIDatEXhgHNOVB5oTwrLfAV:1OBjkNoItEui8Ce3N8
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
Processes:
territorial.iodescription ioc process File opened for read /proc/cpuinfo territorial.io -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
Processes:
territorial.iodescription ioc process File opened for read /proc/meminfo territorial.io -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
territorial.iodescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone territorial.io -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
territorial.iodescription ioc process Framework service call android.app.IActivityManager.registerReceiver territorial.io
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/territorial.io/files/indexUpdated.htmlFilesize
475KB
MD5e5e38940da0c3dd7d97b8c05d995e3a5
SHA19ada75a30e788908f5ea8cd544744aceeb623835
SHA256aa314e4dd2130ed653559baa70264971a362be6956935728883791b491e18f57
SHA512cf00cef64d6ae890b84d0443a490748dfdac17f863e636a705c4da91ad4a526a55b534afac427fd3c679e1e082a5128a40eb5165bf33c651d9acb778dd408272
-
/data/data/territorial.io/files/profileInstalledFilesize
24B
MD5a7d597b24921a29e91e9c17533d0304b
SHA1da88ae8ca8b54ff46170a3e6aea89eabce5bee7d
SHA256011a05b290385e7c973f81f8660248e2d0e19ef572a3d201f7dc16e2791d320a
SHA5121febcc7da6297881a450107291894ae979b4e34a552ea28d25de2c579ed177c41dda686df3adba814959f7c2c0946d3c3bc51d0a7b6224117141fa5a1cc634a0
-
/data/data/territorial.io/files/profileinstaller_profileWrittenFor_lastUpdateTime.datFilesize
8B
MD53cb0ee429c101cd7f333f30145e85ab3
SHA147a2809363449ae0270bf6eebf34d70cb0ab4ee6
SHA2561a7f4b66b7863e5a13e74f2b8ed1454861dcc687d2bf7ec6b71ab4f85587e382
SHA512ebf254371a7d2a3e0293bf76ffa9dc3b811df88542b03f4263b121dd5fe8b30804b60a6b06feb15a87f4803eea1216d81c5da7ae3bfd54a0302e4aae1338b974
-
/data/data/territorial.io/no_backup/androidx.work.workdbFilesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/data/territorial.io/no_backup/androidx.work.workdb-journalFilesize
512B
MD5270ab8c976172d6a3991236470b6bd20
SHA14a009df524a7735c3028dbe4157057379b913032
SHA256720930ef5e7db02a625728c00f8436fa954ef239c2c24203df99f41bf04dc0de
SHA512d51baa7f78e7f7cecb6203ea90c73fd08e0a651903a945fcd5eaf0145f4fdb509883a2121138ce654e4d1d8f2253ece76a633b687a4830202c67b25f74e64fc1
-
/data/data/territorial.io/no_backup/androidx.work.workdb-shmFilesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
/data/data/territorial.io/no_backup/androidx.work.workdb-walFilesize
16KB
MD5615dfbc03e3d09242d3e21ede0874bc6
SHA11e88b3ca1adcb179088b656eb1f659c29d6bf134
SHA25672dff6e3ab8c6afdc08fdcdd415ed965efac0f548edef678ec121ab806bba55b
SHA5129ae35f3c88f171d479bc0082ddde3bcbfd91f58452f2f2cf7d8f542cb78d523c10d6938e0fea80f7157d5c937fa88de0b1cddaccb9dfabe6bb84b50587ea3840
-
/data/data/territorial.io/no_backup/androidx.work.workdb-walFilesize
108KB
MD5721f9bfcb7e4b4facc43b16830776162
SHA11fffbfa57000b275d91f8a5a0813d32b82a068ee
SHA2562ba22b0f16a0bd3d5c0ed4f56016115f83efd3ba88e952cdee7b72a0ec0b8622
SHA512a3215bca343526b4043a4684a544b0548ae1c17f1dc68b4561107c166d44f0c9a308b6d13bc975ad40009cd76ab290a5480f2ffe70b78798134684087dbf8884
-
/data/misc/profiles/cur/0/territorial.io/primary.profFilesize
3KB
MD5f1b8609dd4d4ce5112c17440575c3bbe
SHA1c7e46bd7a17b8928b6f3fc3cd8e5632b437d3de6
SHA2564cd61773c38c1352080fb795c4d3eb93ad7b6e1d43cad9567d06055c52dde9e3
SHA512b5d3d3bf9e54718cbf2fba492d93fe2ff9a9ce09447e3e542ed5138762db94a7584ec4143329a9be436fdacc1399fc597f6c62abbe57b656024b222fb5977c8d
-
/data/misc/profiles/cur/0/territorial.io/primary.profFilesize
930B
MD55ff3ab152ed8e0bb6127427f8a6bd559
SHA1dba449a9b9da2c601766da3180943c830a79fd3e
SHA25656434102fb84308bdf7dfef415ebbb0c7a38b6630f1b97ed6c3cc1db47afb143
SHA512206386af05c0b3364beb20103181545c52a50ca0e2a873f6746d63fd2d3dbb63664345fb5ad19a8e430ebe0cb0c524116ab66d37736c01979d701d849d4f1422