02bdf2f45ab0c1e3e786c6aaec1fe4382499a8c544c0c3c88b91d3cfb3c93ead

Analysis

max time kernel
9s
max time network
1837s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
22-05-2024 19:24

Target

ru.zdevs.zarchiver_0.7.2-720_minAPI5(armeabi)(nodpi)_apkmirror.com.apk
Size

3.0MB
MD5

a897c042775a0b6b58e29435ade381b3
SHA1

7f35b1630de42fdc4cc143e8c18dabcdc7926cb2
SHA256

02bdf2f45ab0c1e3e786c6aaec1fe4382499a8c544c0c3c88b91d3cfb3c93ead
SHA512

e76b4889aa56063e8517af3079f916dced1f885e74463f587b960c213bbe662c59f6696a447648f982f05cb8300548f85576b797b431832a0fba546cf6244bf0
SSDEEP

98304:3gqOweO4GKV27tSVvI/Y8Ix08CHGIWf6oRKS8:QqOw2t9ivKd6GzA

Score

7^/10

discovery evasion

Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

ru.zdevs.zarchiver

description ioc process

File opened for read /proc/meminfo ru.zdevs.zarchiver

description	ioc	process
File opened for read	/proc/meminfo	ru.zdevs.zarchiver

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact