Resubmissions

22-05-2024 07:38

240522-jgg35sge7t 7

22-05-2024 06:53

240522-hn1cmafe55 7

Analysis

  • max time kernel
    26s
  • max time network
    155s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22-05-2024 07:38

General

  • Target

    Update Aadhar.apk

  • Size

    4.9MB

  • MD5

    341b442187e775c210f51daf8da2ca49

  • SHA1

    ae049184d4fe9b95fae57ba1748f0dd5899eaea8

  • SHA256

    ec2f59973066508a4e5d6b962e86e847b1686205e9ee1585b150f3d210fc97df

  • SHA512

    b5b683087838c6b7dee696900310c8fd9417d7ed201f88a4c1984fa5f8287994422c4abd10768f68f665173fb9459b3b5dfd105e4b3a72a036225ae1910c8b44

  • SSDEEP

    98304:jkWT4ssus2bgXHP3pMAcLD0JZvlmMLKBkjuBj1ol7ESY17D:jJTjbeRMncZ2xBOEf

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • com.my.newproject46
    1⤵
    • Checks CPU information
    • Checks memory information
    • Makes use of the framework's foreground persistence service
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4237

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.my.newproject46/app_sslcache/update-ua3-default-rtdb.firebaseio.com.443
    Filesize

    8KB

    MD5

    436e109ad520539522c779dedc31da59

    SHA1

    2437022288ae2743ac3c9350ec3856956cd544c6

    SHA256

    2c7ff29db8ac85d258cc7a387e9d659035a37054286f7093a7d500c251c3d48c

    SHA512

    b279b4117d34c4121ea17be446c19fcfc265916516af73a3d2a7bf696b22e69589190b5526bdf248ca4c72b1f2e6104a908674354df2afb2d00161fa5752173b