Analysis
-
max time kernel
169s -
max time network
140s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
-
submitted
23-05-2024 05:25
General
-
Target
8f4d4efd4e3eb7f5876f35ebbda5d5b7bc2449cb97580de4941647e3b2bc1744.apk
-
Size
31.1MB
-
MD5
69dd2489d2d014550ea74d1b5ee2d22b
-
SHA1
b4ad5364d974d4c493a8b180123644a343eadca4
-
SHA256
8f4d4efd4e3eb7f5876f35ebbda5d5b7bc2449cb97580de4941647e3b2bc1744
-
SHA512
61350860e0a2a867eff91303afb89999247840f00b426aa3a06397c55356731f8b5f78e4358a76efaee454363dd7788932bb15bd5532df5a9835c943ef2c6565
-
SSDEEP
393216:VkIWctHv57mLOWOlRSsegD982RAaUgSvtyVa4op8Gk9/XlUZR+NfA7yG4oGM+3rJ:VttRnWyD9XRAaUfv8vg+Nkyzt/3et347
Malware Config
Signatures
-
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
com.sohu.inputmethod.sogou1⤵
- Requests cell location
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.sohu.inputmethod.sogou/files/.dict/crash_collectFilesize
25KB
MD55478fde52029187d5d905509ce6c1993
SHA1e58ecac8f295029d8b2db5e45109cbe5981f8d49
SHA2564718b3e9617355ef53948fe8d7599019e5fc7378c077a9881ca9a8c9efc098b8
SHA512ebac3d120708831b3b31db43cb628ffb3ead81ba84bffd5de96ceb62b8a157a0966505bc2d01cf4fe0e2b683b952abe1679a2dece5197f4ed3a58cb05e4c8f3f