Analysis

  • max time kernel
    47s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22-05-2024 11:42

General

  • Target

    von.apk

  • Size

    8.2MB

  • MD5

    cd9468abbb67f4ce168dc3d44456ab45

  • SHA1

    7ceeedfcec678d8658ca250832808570cd32e98d

  • SHA256

    7015d6bbd7d48ddded1f46e7d8ac1fe90d59f3088b93ca026ef788e8611e8d4c

  • SHA512

    e80dc7e141a30e4c292b25a5ab21bfc694ff2257209370f5e833d5a3dd9ad6e08d92c5d9731b6c9a7d425c4a078803728480995258f18ac354c49c240d9deb7d

  • SSDEEP

    196608:wt5pP+OdoEbb5I5gvo5iHP2qnLqpThZx1FKbjSQ3Llfx2f3:u5JXjw5yO0LqptL2b2i6f

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks the presence of a debugger

Processes

  • io.ionic.starter
    1⤵
    • Checks CPU information
    • Checks memory information
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4270
    • /system/bin/getprop debug.mapview.logs
      2⤵
        PID:4431

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/io.ionic.starter/files/profileInstalled
      Filesize

      24B

      MD5

      bca43e68b11586f986d582f4b349331c

      SHA1

      b0903bb2d6c941baa2f896b88cf48634b30287c4

      SHA256

      b07143e5ff46f5ded4852520fbdda202af31c70fd7a6c5875720d7203a58cb39

      SHA512

      d6e7e628a45b827a8dc65ffd34f85f23c32a19c5c7892f0136610c5caf8a99f1db8026bd48dbaa410e68a7280cee533c9157b2898aa72a457cfaf26468f2bcae