Analysis

  • max time kernel
    36s
  • max time network
    155s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    23-05-2024 22:00

General

  • Target

    ff6095bc3b3d177cdfaa76c6e9f9ee573201b0a565089a5bbf8ed9ab33e4e946.apk

  • Size

    4.7MB

  • MD5

    e68119689aa8a2b242479a9e1481ead5

  • SHA1

    d7a1feb7fac2b8daa6981160c88dec6627da9ac0

  • SHA256

    ff6095bc3b3d177cdfaa76c6e9f9ee573201b0a565089a5bbf8ed9ab33e4e946

  • SHA512

    d353914624f499af923feab0c5d944b58921adcce93425266542d8ca2a09ea049be8d971ad8d3668f734677528ddaea1fac04bb247c5847624eb05bd0ed151f2

  • SSDEEP

    98304:DBODWn0dEswcVumRmEUz2BgnEH44qK1QK9LES3rFDiXrYr757Esr3VOaI:tOa0dEgjR7Uz2BXrTDuXrY3vO1

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • com.worldwide.worldwidenetworkservices
    1⤵
    • Checks CPU information
    • Checks memory information
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4337

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads