Analysis
-
max time kernel
156s -
max time network
148s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system -
submitted
23-05-2024 11:59
Static task
static1
Behavioral task
behavioral1
Sample
pda.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
pda.apk
Resource
android-x64-20240514-en
General
-
Target
pda.apk
-
Size
4.9MB
-
MD5
c4c3285e3c5b7481e3357004e50a581a
-
SHA1
6441f051acff781994c84730210fe1cb61708b28
-
SHA256
cbf10c793219adf26ce3c9a69df26b467d326e31d857c49e4c964000a3c84e3c
-
SHA512
66a780bbb6ddbcde1120f60c9312028c7ebc7fb45f0fd919826d31954ec094ed68cb2b49b8e83c91a2b551bdb21d00af9efde438da029b72fb8bd3967f2f9eff
-
SSDEEP
98304:sUTJ0ANW2ZGpYQcgCJ+F7u8hiqDrhp2jnisVUCTfEh5pBa4Eiu+4ES+i0:s+2AGIgIizhiqDrhp2rifR+72
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
Processes:
plus.H58EF5770description ioc process File opened for read /proc/cpuinfo plus.H58EF5770 -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
Processes:
plus.H58EF5770description ioc process File opened for read /proc/meminfo plus.H58EF5770 -
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
Processes:
plus.H58EF5770ioc pid process /data/user/0/plus.H58EF5770/[email protected] 5143 plus.H58EF5770 -
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Processes:
plus.H58EF5770description ioc process Framework service call android.content.IClipboard.addPrimaryClipChangedListener plus.H58EF5770 -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
plus.H58EF5770description ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone plus.H58EF5770 -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
plus.H58EF5770description ioc process Framework service call android.app.IActivityManager.registerReceiver plus.H58EF5770 -
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
plus.H58EF5770description ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo plus.H58EF5770 -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
plus.H58EF5770description ioc process Framework API call javax.crypto.Cipher.doFinal plus.H58EF5770
Processes
-
plus.H58EF57701⤵
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5143
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
69KB
MD575a8168e7080b90fc2956592c268371f
SHA13702da56d31f381525473364f031dc884e37076d
SHA2560b9c032080788add7f5989d0ce145e66a4686ff3a43b0e48dec60bf18bf75701
SHA51233536573c834fffab7236dd96c22cbc3d075ab70b622ff7787381e5c7c262ab62e0252f0d07313c9227ccc8308cd93cd96373e57fa55a066691d5b5cfb55f5d3
-
Filesize
69KB
MD502f69eb4fe05ebc6c9f736d83e5f7e26
SHA1777d75e14a73f5721fc4ae34f49a9a4b82311373
SHA25613502356b7d3f910107aeff131e9c4a2b892744a125a2d1a2a206b219dc36042
SHA5127c1f5d68d40bf37aef2e59aa9a4f96d1ef642a8db7e53295953b0b5fa3a63cd7546c5cf8ad3fc17f6b84a795a08e13024d8dcb3db828ca3fad634964cba69bcc
-
Filesize
32B
MD5d7409f268e12bb25f05e263228d3e9e9
SHA1b7cde301a619c9018ecd8378079d412c63185869
SHA25609ef2b71b937d99952c0920eee24ad09babdb79697f6c7ad9118adc29120fc1d
SHA512870dd6b4e50abca228c0789cf24eae96534120acd27baf6742e9aff888bb3fd8da354f0e5c7991169ebc6357739b2d2c734a3ee8a9ae38932d32c28f9db81468
-
Filesize
2KB
MD539a4827fe734b74c53209ba1f9d3f4b8
SHA10d6eb39289ba7736339cbb80598be7ec4b490232
SHA256c290cfd06e568b52a6179b9799e2d710299b5082ccc566082dfacc133e4ee881
SHA512f05507e120266dc8a9b316484033286f4bfbeff9f0ac67ad05ed07d0625e7f47e881bc9e43af3ae87ee2524fd18a8bbfed81bd298315d19ac79087121a5c77be
-
Filesize
3KB
MD5bbb3ec646999b30aa2c80431441de316
SHA10fd41813ce499ac96689716c68fe6889ae53584b
SHA25679119d22b98a1e110ffcf8db50e74b500e2be6df815661fbd4308dc06f4040d5
SHA51230a8a1045aa33565c2c5f4cb838125d37f7a775f422fbfba3aa1216f8761d509a7bc341badc443fdd0b5c68f3d33b8cbfaf7024120355de83392a26a2ae802c3
-
Filesize
15KB
MD5e15066a8d7a9c01e113f639cad9d356d
SHA18883ab2a9aca27e0eaca5192b728b2ebce4547d6
SHA256ddcdf1bdb6db588c79b14a72c39b60b422f64f5c631aa1fbfe788029100ae61f
SHA512600e190bd19e604da4741044d77f06120ff1e83f800c6f51ddace4f25dac7c96d4104f13db4de70cd3d095cbaad2989149f00a4b353485f47176d6d1d05c0c6f
-
Filesize
95KB
MD55836f3f57e3a06a6aebf0475a81d6b16
SHA1668b1b1d96f9c914b8a546bb6abd03242b082cd4
SHA256bd7c4f0a849da629ee5ec336e69f9e19d490893c3653630ec7eaac73877a4fd5
SHA51275c123d8d88f08698325e1486ee3a968ef9fa43c0437cd0738313343187e1d553f662dd96b60cf9c593ef719232a958b2b8c3c05fd71b67f21ceacd0edf367a0
-
Filesize
74KB
MD53ae39756b0c6e5a8bf9f7f297d4bdf23
SHA109aabd7e2c807f81e5a384d98d02669310f63996
SHA256d76f633aed9520f7970796ac29faeb767e5f79b2869907aa1dbcfc7bbcfdb3e2
SHA51243803f0d6358498847d1702993a21d9838736ad6b61b6829b00f38afb4c603f08a51ab5032c46f5f1fba9771779bb974eb925dd3395557756b11a29a3928f8d4
-
Filesize
2KB
MD5d4e0f601944f00f63c8a8709d5132005
SHA12c5062c122bf2cb2cdc1912f4a136da895a0679e
SHA256d3d8693144929eafecf0adf50ed0e22c126ab3f3def0ee194678f77421ad7951
SHA512acf83bf6931dd4e69951d0cd7b19edd7939696004651b197e4d45ed728614e70c173f25bbe5fa20d7ba688730c971103ead4189ccbf871ba2340745a359b75f5
-
Filesize
1KB
MD58986825478a283ede35ab1a3093ca1cf
SHA1401c99664d466840263479bc8213b9ee777be2ea
SHA256e2199909e67d2185bbe27bcc3fae8abd4ec4dbe3cdc8cd02d381eb10d40b1252
SHA5123911ee47d8432d6f641bc3af2bfed9fde7423939af01e84a1eebf4e27cc276f9e560f3c928f6907ab4468192ecf558a8d0f0b9ae5598bc5398b62bb3a094dd39
-
Filesize
3KB
MD5269c694b50f4cbad843a16b0f01708fd
SHA193ab16da88d7eeb8f096015258433b0e0d18b611
SHA256f05cd6d093b94ad9e60e60a498c4d6a5091bcbc8e94aa1969c073d7df7985611
SHA51260dc1b7ed4985aa8ccb944a1b43315b1f3d1fc53f5f6e3ddc541313231d8f257aa264a3d3d89baf812ea91cd6fe54169ddefd81f660c3b7296cd511db482d9a4
-
Filesize
29KB
MD58820b7f6582a3c45b7527ae6b183dd2f
SHA1653442b2b482c577d07a631859ef5a76896d53e1
SHA256b327c8e38b68245dac1fb9a8b5bf7f19fee0b2c656219b8dfeb3c906c1514ea0
SHA512758a17a3881de1b8caa7fcbacec7279518909b4c667e3e12a498d29bec3b833c3279f69da07caebc25c4b940545aa1240cce1cce618e5ab939841b8bdb7c2564
-
Filesize
11KB
MD5231a688f422ee52a8eae2039a84f7ba5
SHA1048179403c6721ba84fbcdcb9a3973c7ffc16801
SHA25684a96043f24c794ac83c2a5bc1ff4dec5874cee859e4d35c4a68f6600c4628e0
SHA5123292ded47da1c018765d1ea315b6773240898ab0c00a8b5403b83acdc2418e5115656a2aac420ccb1bd1b883868d6f02ebcff10804c0a4e17d5427a0e31fa5af
-
Filesize
18KB
MD5932f099d1caca3803bedc7b6dffcf3f6
SHA1fe17a8f85537432fed7c7081cbbcb15136709b44
SHA256d3a0a49d718d872b83d97414807dedf0b6231b7b4fbae22d945d9cbb1105a080
SHA5126230d3e9d62ee98e51f02f0cdcdf22369a0da0c33720e8d686930d335c3dc38eb785e6d66a8d2f8b075cf76bd4904562dede34e1c7c89ece36f7bf72eb31f1b3
-
Filesize
17KB
MD58efa6d4b3ca15f1389cde03dbbf805fe
SHA1d03e01520c2859f6b515d712bae1a346aeebccbc
SHA25688a4fbcc6c3fbe1c286fc00d869048b14854a1765a3d1e80bee9ff8fe0f1d7b9
SHA512d4ab67e0c7ba0abbdef73f855a83825e2ccdec920cfe0f3630d49d0f963c791d4abc0bb37fe9373073fc67867b598be4ebed79fcf87d25a4e3aa04e229fbbb87
-
Filesize
125KB
MD57933a081600c45001688550339b3b646
SHA1fe8cb857e90b0fed5592e916e9cb2b5fc9f0f8c4
SHA25632e5570f559dbd7f25a7797dea34403505e9515bf6d9d878475f3de323096105
SHA5127beaecbc129ceb09dc7415886a43ba01ad6391e86c99992e7c681abedb5977e523c16bddb14bd27014058b297d249f2f8c337081ffa60fe3a26619eb2d315f69
-
Filesize
42KB
MD5bd08f469b59a839f4d21b3e7e30d7388
SHA1176688ba513e42efa8f2be6d90680ac2c23b000b
SHA256896883a20e757b616f7db2f388b9c5dc6c8da4d15f8656feb6159bc1adeacbb8
SHA512e01b5d5dfd26776170b399d6248013dff8c9df172b12098d4fb5c9e63744fa570d3a8bf8f49130da0a5f81a0a07951a3ea2c6092de7c608429539252e71c5da8
-
Filesize
3KB
MD53c46dec252ed51321ca16d99cd667109
SHA1948efd70bd1e2bf76185d2e4f9ce923d45ca73bc
SHA256cd518861b24042aa6dacd50aef11fd48c91420a962cddd729a633baee6e3facc
SHA5125ba660d37385e8212f5f121af7264320df883d70f3e17d82255f306901bd435d2c55f8a33088de7b8cd5d77f1c1cb9cfa22371c82c30c079efb63d9a834193dc
-
Filesize
438KB
MD57f5cd6b9c6681190aba4bd63f2742d67
SHA1e00ad6afc8671bd335fe918974b604e795ae2d53
SHA2565623556e883f70af025fd2fc11c7726ae7d9f008110690f8291463fbb263cea1
SHA5124f5a7e24a25091aee7a2ffa42a52de1ad23790e46932d0a1248ec62ca8492d9f29d927e26d3adc365823f4cc55e326f4a207ceac6fe2e4edd24e3e584f637286
-
Filesize
280KB
MD591cc3b6309b63c1aeef33513d06f2ad1
SHA1fb6a8e9e34f2ae00df682a9b8050287d5d0cb1f5
SHA256a0e405cbc2cb17d67bc0e67b248ff15340df3ff2ee5516ae9a70fd3f6887c363
SHA51267f70868e66a8183608cd497bf613d5a2c5b96bae6ed8b2d0acda77a3dccf581c3c700323d1add876d3a89bd9549f79b95075e03eb31902222a1dde08e58eb42
-
Filesize
257KB
MD5e0e87339768fe3272600b66ce641b07e
SHA1e3e7310ab409e1d20e28b7552933979ed5f3d91a
SHA25657c0d35408afd62475aa889ab6d56adf5431a0d98276a7405f5551c2eb64d5ac
SHA5129450f6db095dd51515a54e9c0faa5bf3066b99d7f3416c23eec38a2c6e3abe3eac31456d934981277e5fbe0f8e0b812dbd0b1c6c2a4646514e66ae903028b09b
-
Filesize
120KB
MD5a7809980709ff1b270b27a39941421b2
SHA1a8a0e5ba079c6200db0c21e226fab35d6277a3f8
SHA25652ad62101ff628db5e1c87bdb6eabd5e3eda7f53c26a737693165d064a5f9d61
SHA512eda7141fe4ac53e54d53f3f6b3b8ba5529e0b411803dc4d6b5c0f94b2c5c992a65b5d6d36b8c6066c1e426b720a55fe79f66adb07a573cc76223031e772dc024
-
Filesize
11KB
MD581933de9951cedc9c3f1b9bb292f9beb
SHA1b322280ec932e2879b859803f3027992125f9f3b
SHA256e25ca3040739dadcfbe8bbd7c8260f0534c60f37f4bbc02b090d426782af53bd
SHA512f66540ceec49f852c1dcfa86bbcd4e2a52a0d2b01f90af7a3faa2b97e59715fb5dbbe8596911e0082494b5e00f31140b284de6b2ab26996d909a52298e7bb3d7
-
Filesize
4KB
MD5bffdd65098158478eea76fbec10bf850
SHA1cd7a180a544252e844ec5bd6a492b322140517bb
SHA2569e4ca2479040f0721f93f875adabdd58d518f9a2665ea2749b6d6264f7c12e98
SHA5126bfcf0c3673554d7041b9e0d2297291d28148017f94b5bfef1aed3595ac8303463edf220f230ed30198c52f65bc899678dc6e6d5ad1f96d48ef1afc250610805
-
Filesize
9KB
MD5a4bfef93b13cdeaccae35a316ed4ebc1
SHA14bdbbe0286006d914c51305466ef37fc205b6d02
SHA256173179f42742c42e9e0bbe87a58d253b268e5be8469b7df518fd54d3cfe2e424
SHA5124f782cdc6b44181eadf6995dc59113343607dfbd1e454660084ff4c599a3f9f2b92ebbab2fd32f504bc7d30c7f0d6c43e6501587a08a2ccc13d1fa0e1f1fba75
-
Filesize
821B
MD549900792e77940e59d0025b5bb89184b
SHA1ee18b183c49d5ffc2c1e0de94e09aa56a9b1e7d1
SHA256c5b59bc14a8787997aba9f5639913f6976df7effc86f7ee9fc31e9faaa132844
SHA512343f08c1a2a8ebe564f565c2ceaa0fc815d963c3b89ad678f32da9adf9a80db325f49ca3c8c9d3d9ba733ce868c787a461260883551d77f25ce8a5ad1366afac
-
Filesize
16KB
MD5d228c5103955f1bf69235c813d7bec63
SHA1a4925ea944eaf44f21bef2289a3c64617491d7ee
SHA256462e4d3fb34820aa51992a2e2cf81941cc298711a858b035913271fe737a019d
SHA512890ece571b565d02c088f11d0539d60e600fc5c760004fcbbfaf32877e538f4e16a71f253bf53db8a97226f2df5ac969843acd668980198986f733b78d285170
-
Filesize
11KB
MD5d232dc841e9866a72ef72e8212f0e085
SHA1682abc343ecd10bd5e5d84ea839a4460ee6827da
SHA256491e7a1fa82788a394e37f5b2de658ee14b252afc0be6b4a52425226d9f9b717
SHA5128e058a7763a7d3ff2c76229aa73d2e13e0c42f0b1ffbb0574d80ed56d63c4466e56666a041d13883e9c0c490ef270ca632c22d89e0261283c110170b66f35746
-
Filesize
21KB
MD57df3024ad0fcd01d84cc2050a25f32c2
SHA1a4c17fae7973424c447ffc4e9df9bbe274f20f75
SHA256f9b84ce116e3b0a92cd051a1feaf83cd23f1e1231d475a50838177ce373a9bf2
SHA512bb5e6dd8e0e3a71cdebd4af581c5f08d6a3d985a941ec10aa6e78308a036f8083921ea1fd3bee27ce7f3240ee1a116d8e6198cbe846e8248eed0ae6158fff01a
-
Filesize
9KB
MD5ee8cfcfd2ee0ec686b5793b418bccfc5
SHA1789ae8c38465a709578ed29bfad4057883989818
SHA256e3530ee4b92579b8d63f2d53988688dde3dce54572b5d49ebc4646b1ef5475a0
SHA512d7ca93fe4c9ad6f835b1880a35c7ce355277e7085afc3bf32fb4811927165d4961b1fd9afa6f859b95a2ea787f1045887a20c88ee3ed69d731808b2dd49218b8
-
Filesize
4KB
MD526f172da84fb8483fb65e3fa227cc9b7
SHA1f100d4508f5e11a21fb0d71d8fd9375858dacafa
SHA25690df6c90193979aabc3045b4f0751c2f0f687e2471edda71749764a08f72d0da
SHA512a7312074fbea4346078586213705b2ccd470285ad0193bf61cbfdf5800d6e7336375e2ae85b42fe7aac47605249c3b6e451cc06e60fe3fa764399e3ef59a9f48
-
Filesize
9KB
MD5fc0187188d8de4d5a07723101cd379b5
SHA1347b457195f898365272da2bb689f2d8c30e294d
SHA256bbc149e5e92c90c0149a91ad4339c71e246a8577f40fcea6204b4b82f30967a2
SHA5127cba9e8fc2254da0ca41fe806b9bee28bd404299a9fec1a293784e3734ff535a50ffe9e14008222a26ac5669de4871be9d96e5c535e0d08147f51e787bbc6d06
-
Filesize
22KB
MD5cde497b720d7bbf4dd85837447e9aae3
SHA1f2feb7f777f9c41eba519bbdf54ca348f44ea02e
SHA256cfeb285a0fdba6bed03fd9198d907e8b04fc6cc39032ddeddc2b951a6359a863
SHA512f3e6109729f8058c68f98d6336ecfd016b45759ffff54e8cc05a8908dc2e793e35a2ab1e5b3148cb76792ff943e7623402b50c76a50d4b079103079196b18592
-
Filesize
4KB
MD59befce71c8cec497600ad3e386e3f1ed
SHA1524a54028dded4d6e32eeccfe1d270d1ff231ea6
SHA256b53e82888cd18af78384f81eacb538597e8decec4ee456669e983c4ef2035158
SHA51256dfaa9332e860d9de8c2f9ac3cc49628f9eae370e7a6497b2395e7c1e438d0ba15dfd42721c83df31b299268d45df630ef797cf14efe75885b0dbae5b429cf8
-
Filesize
10KB
MD5fc34ad42a0e4ed2b7ab9cc7b631aec00
SHA17793b0b27c98984fe8bc6b2ba4f6956c4553ab54
SHA256bd3cc2420958564f6ade3efd637b4e271d07059c17154ca951aa2944c1ccaa91
SHA512832414c3bbe7485556ea8c3d670d07a626f28d5e286ad2988ae5240d67ef51585f8348df07f8a3675d6ecd4d25875f6afe00c84c7880243836f974dd4da7ae47
-
Filesize
4KB
MD5be25b606d99c4cdad23f2d33d4c71b50
SHA147672b56b21e96a0e005e805616d9246d2e16932
SHA2569d044bbb626ab7eb150bc6fc85a61ac1858c04e275afac3e9cfdd791c7865f2f
SHA512c0b89f22d32c7cc8610e7c9f7e49934b742bc70f362f3afc9d7ff9447a71c9165b2f604768cb901bcdc628b8ee7ccd1cb43ef86d51b32020a54ec03e91ac054f
-
Filesize
7KB
MD5e41d5c987a9b8c016dc546f484697b53
SHA1763744661a5a0a5d2a00b49e32d505ce51fc20a3
SHA256d51965c11ec74c4c4047f8679d594e65a21dbc42dd340602fa7077751df3b9cd
SHA512fcd4b9da9d5498f3f757e4e4a096beaf70197c93520496fd60e5c1462a99a004c55eed830cc85b106b9e1a7cf9570295327967deb7cd73dd150081ec870f2416
-
Filesize
4KB
MD56afbbee379b0bf6c5c362bd1f794a96f
SHA1c747fc679ad619d6edb033d25460dae7418f86cb
SHA2567d0853d716a62ed031df0ba756667d9df2e15a36c0faf2f41860438b72ffc0b3
SHA512b076ca2fb9f8e6b909f9f2e77a7b3b9e3992ff211271857c2f66a050e2edd3bdab6731dc2438d1e30525b56338bfd11972f522007e66d21ce6ba1eaae7006a38
-
Filesize
778B
MD5e1b6c5843a5b5ee1f570ef51956f476e
SHA1fea58b4f92a67dda6c4a1da6fe7d2b28043f2675
SHA25616d91c69b298d1e99edce25fd7c07ec95a873fe524a538d1238d4f3955ab2206
SHA512321b3ef2b37918938074e126a409bde4413c122e763bcf81ddf77fb5c77902027654e349a5b80c3d2107e0f4f4fb4abfb44ab62ea93aa8b35f072c254f827865
-
Filesize
35B
MD5762298b93820a5cd8b6d8ec469078f7f
SHA1d5b02a2ff3b235cd2b61ceff53a1d88b8984477d
SHA256dc3f98a33c26c2796dc294b354831fd5ca9796295f4cb38479c80b145d4807db
SHA51270f864211ce16679d0538abf9b7071d27c2d22ae458e32409d20065032c762dd186307ef33ede90abd9ac794a4ced8b163404e9799c05f0c515337249684311e