Analysis
-
max time kernel
47s -
max time network
158s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
22-05-2024 11:42
Static task
static1
Behavioral task
behavioral1
Sample
von.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
von.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
von.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
von.apk
-
Size
8.2MB
-
MD5
cd9468abbb67f4ce168dc3d44456ab45
-
SHA1
7ceeedfcec678d8658ca250832808570cd32e98d
-
SHA256
7015d6bbd7d48ddded1f46e7d8ac1fe90d59f3088b93ca026ef788e8611e8d4c
-
SHA512
e80dc7e141a30e4c292b25a5ab21bfc694ff2257209370f5e833d5a3dd9ad6e08d92c5d9731b6c9a7d425c4a078803728480995258f18ac354c49c240d9deb7d
-
SSDEEP
196608:wt5pP+OdoEbb5I5gvo5iHP2qnLqpThZx1FKbjSQ3Llfx2f3:u5JXjw5yO0LqptL2b2i6f
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
io.ionic.starterdescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone io.ionic.starter -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
io.ionic.starterdescription ioc process Framework service call android.app.IActivityManager.registerReceiver io.ionic.starter -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/io.ionic.starter/files/profileInstalledFilesize
24B
MD5bca43e68b11586f986d582f4b349331c
SHA1b0903bb2d6c941baa2f896b88cf48634b30287c4
SHA256b07143e5ff46f5ded4852520fbdda202af31c70fd7a6c5875720d7203a58cb39
SHA512d6e7e628a45b827a8dc65ffd34f85f23c32a19c5c7892f0136610c5caf8a99f1db8026bd48dbaa410e68a7280cee533c9157b2898aa72a457cfaf26468f2bcae