906e34817bf26a0a057c35513f941a8862dba537a8af4924d04dae2af188aa7d | Triage

Analysis

max time kernel
7s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
23-05-2024 04:10

Sharing

Report Analysis Logs

General

Target

com.qihoo360.mobilesafe.recommend.apk
Size

3.4MB
MD5

0a2f057148b0746c4a8a64f170bc0bae
SHA1

aa62a02529ddb89e7e07faddddd615674f702f48
SHA256

69b3baaa23f0dfa4a27edb57f04865b38c7ae83a8c63740109488ff6ce0ca90b
SHA512

ddc79a94ddb505aee170efb511d4f0b0b2d35fa72e801e608c78c23807a3040ccbb37c2c498905ba96f3742d7b3de88767d981ef373b32513ef6c9054433e392
SSDEEP

98304:/9InT8ySMtRbS2hz0yrsTdbRxijl7hQBj:+Unkp+dxuh+Bj

Score

8^/10

collection discovery evasion

Malware Config

Signatures

Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
collection discovery evasion

Location Tracking
T1430

Geofencing
T1627.001

Processes:

com.qihoo360.mobilesafe.recommend

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.qihoo360.mobilesafe.recommend

com.qihoo360.mobilesafe.recommend
1⤵
- Requests cell location
PID:4289

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Execution Guardrails

Geofencing

Credential Access

Discovery

Location Tracking

Lateral Movement

Collection

Location Tracking

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads