Analysis
-
max time kernel
128s -
max time network
150s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
23-05-2024 12:02
Static task
static1
Behavioral task
behavioral1
Sample
iot.apk
Resource
android-x86-arm-20240514-en
General
-
Target
iot.apk
-
Size
11.1MB
-
MD5
b72450cc857911ce1c1b31edac052043
-
SHA1
29416478f589e6238056ea69b4d4a4b05e14a657
-
SHA256
0cfc702d274e88519d7bcfff4c6c92fa7d09d21c5d5740ec97a192e09fde5f7d
-
SHA512
22422f00fb60286aa12d44b96ed43eea577c01d189169d0f17d5d593bd120008722f051b5060bb6f8b891f93884c30a4112169f72e8e03c3b54c1fea3053f382
-
SSDEEP
196608:JIHSNgqI1LrHgLjgqZ9g9O6er7CxxTm0o7bvlwcRYnlj5+sTB88nyB+QC1MYPuH:J11I9HgLB9U8r7gxMwpnysQCMf
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
uni.UNI8598589description ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone uni.UNI8598589 -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
uni.UNI8598589description ioc process Framework service call android.app.IActivityManager.registerReceiver uni.UNI8598589 -
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
uni.UNI8598589description ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo uni.UNI8598589 -
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
uni.UNI8598589description ioc process Framework API call javax.crypto.Cipher.doFinal uni.UNI8598589
Processes
-
uni.UNI85985891⤵
- Checks CPU information
- Checks memory information
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
-
/system/bin/ndk_translation_program_runner_binfmt_misc /data/app/uni.UNI8598589-GSVeslVc_RiaUQbzNbswXA==/lib/arm//libweexjsb.so uni.UNI8598589:jse 49 52 1 /data/user/0/uni.UNI8598589/app_crash/crash_dump.log2⤵
-
stat -c "%x" /data/data2⤵
-
stat -c "%x" /data/data2⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/uni.UNI8598589/cache/cache/weex/libs/weexjsb/armeabi-v7a/libweexjsb.soFilesize
4KB
MD57628e2d9516f46d07f47636f323b1186
SHA11cc64d0e9b4ae930ed8d46904b01f99feb6e09cf
SHA25613f588ee6494cc79d11c1ad39c50689d228bd054ed1da52f084b0feb708e14a0
SHA512f56bfbc93b119ab9aa656af00757c2d46afb01234b91644d6b020bc2ccf3ae68f88e6df8757963f8af8c29325364b97252fcc27debca20cce88eec2adbab4eea
-
/data/data/uni.UNI8598589/cache/jsserver_start.logFilesize
46B
MD59d8907fc1ea8440dd2d2de22236cb07d
SHA12e81f3d80b5459baa9a8c5a50cc901e7716a726c
SHA25648e0abdab7c305ba839a0e4a532ca580888e13fe8981411d2b487e9736d614cf
SHA5125c86123fdfeea9b026db07b3c88c3d4ba5a76b7c23db2550fea096fedb5b2ff7ff0a2049280c7a4e36cf8405633dc64166dbb0364fedb8b17738fb8d258a4781
-
/data/data/uni.UNI8598589/cache/jsserver_start.logFilesize
124B
MD509b239ddaf00e6b622cca6a6679a058e
SHA1ce138f998f059cdb4b8027f10d20b17b008e23b2
SHA256c4ebde63b8a2b13b524cf04e44318f9c36cf6a8fa76e2d87fe142b5e95f620e3
SHA5123f89f33df994249110f63a72fc98827378e99967e9c57be969a00cbd3767f1af99cf6d8adcb32a3fcfeede57b3086bdd1229953f356da468d5b2e4e81ec85206
-
/data/data/uni.UNI8598589/cache/jsserver_start.logFilesize
856B
MD511b8e36d86eb4a53f8dbe1d5aa8ba54a
SHA125bc20bf28fb45a5b54430f05d1b4e1ebdd01aa3
SHA256263fbddc295e13b4be15d119e1465b2200a4ed8ff79f68583d2bafb92ab193eb
SHA5120ea82a59ac5a19dc9e7ea67e85071c03c27708ce300a7a419ef9e74ec2f5499793cad925894608d13d0235723c7a4c6c3ad73e058040da5a4aeac4d2c1b3a64a
-
/data/data/uni.UNI8598589/cache/jsserver_start.logFilesize
934B
MD5aa1c157158bb2f78e55ece4017c206e6
SHA16803d4b30f51b1f1bbb56c2967bb426bb2189d6b
SHA256ba9577cd5d15ece40965f2d165e82717366d8eee0fd389a6a3e5feffdc6c5d78
SHA51290a5d9f6d3e5b1e2dab0ebd3424e470ac4c5d23fb96159ef3693a45deed94d384953e1a46ff01f8d2ed85a960878951e2b818bb8c20c633617c509b334a7ce80
-
/data/data/uni.UNI8598589/files/.DC4278477faeb9.txtFilesize
32B
MD54f9dfacaa8819e74f1f0e265fe88f829
SHA11313235d86f4bf8639a216a764d21d0bc9fb1332
SHA2564e5022cf663b6d243add9e5efd0c517671cb3aa46a82d5aff61333e7a1bd9d86
SHA51235f7a092e68e5706f37d653daa794e93bdc6db9584f737427e25e9466d4271ed1c13337fade66a8014a4e62ccc42c624521c7f63020d9b282b9589b0e3ae37ad
-
/data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/__uniappchooselocation.jsFilesize
37KB
MD5541b74a308cf145406f9bf4ad1fcb448
SHA143f3e2f9e4b70fe5189d551ecc1f16d8ac9fd138
SHA256d02fdd667cde8112918fb883c265fa58fd04c9ca7fd2322be73219c6cb0b000c
SHA51220cf116dc15b529f1f0120af35d51d7ecb5c8851796e1d11b6985ba0ee9a70a4eead4b187157a5c67253a3e0ce8c54d12764ff4748f1779bfd15a965a7828666
-
/data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/__uniapperror.pngFilesize
5KB
MD54b85724c8336cf16e4259cd77839d078
SHA10077e1dfbd257fc6b953b46b6e0e2a9f67a0e167
SHA2567f8be3263ad01b19844b6a5e6609ac81e2c3c1370c4abd6b7c6083645a038e19
SHA512d766dcf9278a1f5fb02be2eb2f26cc0f08c772ad5bee4faf5ba17424eb0bfaed32b13e2688ae690d38216763698c0dfd91504c3ad2ff21b0810cafcda56c4560
-
/data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/__uniappes6.jsFilesize
51KB
MD514291ec63c2b20f07b350d41c0297f5e
SHA16c4d35af5d8af26a1a968db7e843143024718a20
SHA256dee953e53bd2039a40f75e2bc911a777527e601795b3391bec771790aa75d6a9
SHA512e5accdbecff89572796a45ae493d1fb2952a929a1bc2d38e119d2a7169d856f25598267aabdbe5a8f7dbb02c08491eca8df2186e5d968f7f3ef6c978e899e3e1
-
/data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/__uniappopenlocation.jsFilesize
27KB
MD53c1dc9d213de7258b4f8bbfb7831628e
SHA104b60c901b98d11a76432bdac8fb29d84f6bafb3
SHA256826e66a8621e89023fd89fce6ec66ca0dfcec747aa7dc3d24f86a1181e2d244d
SHA512b21b47e6687edf12821b26b8d871ecb0e326f41fe18a6c24d03bc361fd4a8e0c1f58ab53d2713b38da0249f48407da49a28be7cc969df4cf9996b206c415ce89
-
/data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/__uniapppicker.jsFilesize
28KB
MD5b6dc38f3d29246d6b4ddf0a871dafaf7
SHA1a57aa511ed4af45d98be339dfe9a98de5832f078
SHA256783f881c1a1c37750f4382f74bdf32818f5135f20e3b4a15b9006891a7cc8e6f
SHA512a8c656d2f6caab3ce9fb58022c79afe2cd621e438e4c15afc6ef83988b6418dcbea058ffc3c3b722eac84d5605ae065f081907bffa8ed5c968ccf02ecc0d3973
-
/data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/__uniappquill.jsFilesize
211KB
MD5d314613ad90308725611f16a8328db82
SHA1500a8b141303864410fc7adc9b2458fbd969fabb
SHA2568b8e7cc7346194e76061f93673a5c3c9765ea06b27fec0707156f4d81c2f4e24
SHA5125763587454ca2d7ad2e933ce784423314ac8379bbfe83c7025e54d9a4a48b27e58f7a63fa58259f0b30c0b7a88ce42a446b1cffd8b89658251aa687ad9e18e02
-
/data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/__uniappquillimageresize.jsFilesize
23KB
MD50cd800647b3b6799424a3e218f1a0755
SHA12580e001a0b378437c24743afebea418c46d929a
SHA2563a5a225ee38e2d4a545b2f8de72d5b8efa195a74359d6d17f534d5ecb18a7d6e
SHA512aa8678f60ed303baf013d70e71a7a43dea6bb2082ce9073cc67c32ee90ae65bb9c55d0a03bf853aa1e1d98b0c5f61cfc867cb92c134d45f43211e8d0ee7ea0bd
-
/data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/__uniappscan.jsFilesize
19KB
MD5132bb0dbe8a73b86ccc8638556321ebb
SHA1468ff23bff2c2623b1dc1e3d176f6476e17c1499
SHA2560aea8afdd177ce978747f2a25467c9a1aacef2407f67266399dd1d8206b06167
SHA512160abbb89af318c16e5a11f7460315d0b39a1747034d0adb938ac3bfb9cee982d29fa53bfed9320871e13287ab9498674c31f58d2e506ea6e0044e970d4f7263
-
/data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/__uniappsuccess.pngFilesize
1KB
MD5e1812c5e999af10160557521a4ffd557
SHA198345a98932f3fa62275d7f6c4422dafddd65b8b
SHA256fbb49724e75bed2bf0ecbf45f01dbd093ee80bcff204826de3861fe52a727092
SHA512d0b4432fa9409e3f8894079100a8b8491029edb474d285dcfb14b063b7776424b28f0d846c828fc50b0811dd99c02e9af500f3130010b356e3759c566894e9e3
-
/data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/__uniappview.htmlFilesize
811B
MD5ab82beb1c8665fdd2f21def36201bbff
SHA18e7d00582deebd068f1e3e6d642d4a6fa495f5b5
SHA256ab393dd01c15a4b9f2d15173a06bb1f79b2ee67e34fefa950c6bdf7164c527b6
SHA5128d6add016a2e29886486b4bc38991f9ede963f0f7b807b47559a5015cfdaa3faebde7997ef968622aaac6671039b71a8ee9950b2c388cf3673a4a6b84c74d1ed
-
/data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/app-config-service.jsFilesize
2KB
MD5b1e832c6f5abbf9a30a023d6b1a1bca0
SHA1b95fc8c54d92c6d9d57db59e4402bc5e852b3df8
SHA2567a3563ea7a70d2720616158c45fb630d4e8458fd6de6036ec90ff82d7e7a07c2
SHA512aca01a81fff6472dd5f0d2d4b41a5d4282adf2e6e9777865b457bf12c9d0680d3c86a17a665c85c9dc8784241f36e4c13a6b22d8f447b12939e3339f8aae352f
-
/data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/app-config.jsFilesize
1KB
MD5c002b4467acda895a4e6568bf4105c75
SHA1cbbf751edb55827115b9a7006f64b9fb76a97c52
SHA256e5211ec4a530360ae7cb8679c61c154fac6ed9030a621e2db56fd9e2b130a4df
SHA512bfaf77cdce436381ae8be61525360b6bf79b1d7f0fc00b153a2521457b3bff7d60adfd402edb4aac44fbe4e13916ea33ffcafaa42d1c4768b370210810a6c730
-
/data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/app-service.jsFilesize
6KB
MD52392d4b30747e308524230dee5cb705f
SHA192585926dff16567b4e933a07b37ede013aeaf03
SHA2564899b6cc73150b74bd95be3239ea6b7781ce1ea61bda2f87d9f79c82aefa7f20
SHA5128a8cb850d57520bc403d7e2369250316eb0064abdfbb0ebd232ec76775a5c7688894fb65befcaa0923aa2a2d53a60b70167f10d177f4888e8ccb96140524e906
-
/data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/app-view.jsFilesize
8KB
MD51ad5d283e62929319f79fac4599a3cf3
SHA1732801027e3b90dd9baa27a2a8e6b9933de76385
SHA25622f7e8b975a7be1b9f92cca8820a9a10100b04080d1214041b36d0d68229c3df
SHA51220f55e0c342af7c02ccf8e50847b8a25075d27c4c6384a9253a346becfb715ec2a1c075350e26e1378dffe0f60cf7241db7340cc477b3c92e83483cffb279d05
-
/data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/manifest.jsonFilesize
916B
MD51e23fb6fbbb90b3b852630ffc78be835
SHA18c2a83578a1ee65f0714e60852c8544bf7d5e5b6
SHA256d567df2de6d3b962a7b6a8646f2c7785070b33571000f9a9e0e242c18b2b4d70
SHA51277cfc30cd8825602119c081b4efb028a966c2c9c56c46d3a3df83006094d7c00fd9250affd32d48b4b9dd09b65894f9bdc49c65a214d57e136d4662c80ab06b8
-
/data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/static/logo.pngFilesize
3KB
MD5457f704c8de0a8fa0064134423b9ed9c
SHA199b712a4df1a152b6d7ec6cbd0d7ddcd8d9c9248
SHA25646719607502ebe256abff3ee000121c761708258187fb2bd6dac8443845ef32e
SHA512067034064cc18049b6084642bef534ddb2206e2ff72ae692581eb1d7f365d6d44a6f1aa922a38f5228c8d15971786017699d8e9a51dcf5967e546c28f51dbb5f
-
/data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/view.cssFilesize
57KB
MD5a5a3e26831d0644c0b8e04460daf8ab4
SHA17020aeff3f60b066e908ff28fb488a9946a17c39
SHA256060297bf3a8e4f97b158caa078c60f4904665b783815d1487baa4ca183533fec
SHA5120350cfa42ed35fed8d3d947f598194a6f1e0f8e238d6b4600c606d6c9344e7f1234f46d845f82b0853f7124c0382599267228c36a8f959c7d6273fa5a4f3c2f3
-
/data/data/uni.UNI8598589/files/apps/__UNI__8598589/www/view.umd.min.jsFilesize
388KB
MD58da3ada7595756ea63e114b797d0f1fc
SHA1d4c1c501b3be4335e776915e3dcc7b43040e8829
SHA256b6c6fc57c4414fd4e0cea7f2800d08f8d88dfe905f28f35766e0df58573ed565
SHA5122b26e0e2d7c9ed489def34b7d29e69961d0a3ce9cd16b08652e0e6c5fb7577bb37d14a1d6d7aa5c62a4c47dda933ffa3628bbb5c10a7394f60b5e5d554adc066
-
/data/data/uni.UNI8598589/files/cnc3ejE6/eje3cncFilesize
35B
MD5762298b93820a5cd8b6d8ec469078f7f
SHA1d5b02a2ff3b235cd2b61ceff53a1d88b8984477d
SHA256dc3f98a33c26c2796dc294b354831fd5ca9796295f4cb38479c80b145d4807db
SHA51270f864211ce16679d0538abf9b7071d27c2d22ae458e32409d20065032c762dd186307ef33ede90abd9ac794a4ced8b163404e9799c05f0c515337249684311e
-
/data/data/uni.UNI8598589/lib-main/dso_depsFilesize
272B
MD5cfe0781516f4716583cd4a818f4afac6
SHA12c30565c4d1c6b1037c4a7c0a99ae569c5096715
SHA256cadf6004d1f5b630b3ddf1d9053ccdd402a19d15913b6dbec2bd65de47d234ac
SHA51226a88c6e78cfcb41d21e124102533dab5e3ba37f3e0d124d3cc3fe9c66d02c20f193297b6494c216f175be2a83a8b609cd1c1f9b0df4356b0aef39f5b00eb5fa
-
/data/data/uni.UNI8598589/lib-main/dso_manifestFilesize
5B
MD5c06857e9ea338f3f3a24bb78f8fbdf6f
SHA1c5a0a2529d2deb60fec041b4fbd722a2ebe31702
SHA256957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
SHA51229f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1
-
/data/data/uni.UNI8598589/lib-main/dso_stateFilesize
1B
MD593b885adfe0da089cdf634904fd59f71
SHA15ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA2566e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
SHA512b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee
-
/data/data/uni.UNI8598589/lib-main/dso_stateFilesize
1B
MD555a54008ad1ba589aa210d2629c1df41
SHA1bf8b4530d8d246dd74ac53a13471bba17941dff7
SHA2564bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
SHA5127b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339