4fbb94464ffc589c6bb8b57836e4b635400b370def2f1bf24c5e69a445cf0403

Analysis

max time kernel
175s
max time network
185s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
23/05/2024, 12:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

cRY_Handset-release-prd.apk
Size

7.0MB
MD5

6fe805ec9fde70be8babab0955653553
SHA1

565b0a6b6aaa4c57c7bc03ee26b02a840dec6299
SHA256

4fbb94464ffc589c6bb8b57836e4b635400b370def2f1bf24c5e69a445cf0403
SHA512

5f74469215bbe714a69a8d92a82e31af94854ddc307d32386d1aebd51e277c359c83ac9ecda1d787d28860fbbdd98fe8c5c2475f5739e68cd67f4fd3f12cc779
SSDEEP

98304:OYyrK3cs2UPvwCq+3JhCn1Z6Yh2gd+gXiaIkbdCGK70iuKfZCzNaG48sZxDklso6:OY1h2UgBaJ410qxbW73fIzNaT/lBDI4

Score

7^/10

discovery persistence

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.cry.cry_handset
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.cry.cry_handset:mult

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.cry.cry_handset
Framework service call	android.app.IActivityManager.registerReceiver	com.cry.cry_handset:mult

Checks if the internet connection is available 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.cry.cry_handset
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.cry.cry_handset:mult

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.cry.cry_handset
1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:5168

com.cry.cry_handset:mult
1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:5213

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.cry.cry_handset/cache/uil-images/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/data/data/com.cry.cry_handset/databases/cry-db

Filesize
32KB

MD5
a626ee2ee20320076ef5938bed4006fa

SHA1
ba13cc68477486aa6debdfbb4795b1da702107c3

SHA256
7017d5d694f729d041de8e6b96b9382fdd4887b46015b6106aeafc31e963f440

SHA512
fd83eea8c55bc00a280a9769328d0edc689caf4d0f5db47a4b6f115990aa8f45c63e6890899f52fa0164c0be4a7d48454e0e63ab67622497c6de8bc41d221d36

Download Submit
/data/data/com.cry.cry_handset/databases/cry-db-journal

Filesize
512B

MD5
33e3806d04f366ebdbfa450388d83fca

SHA1
043230eafe43a98a47b6c0c8e4676fb7f9ba0c50

SHA256
bfe244675c116d2470d736adbfc77aeae6b77da9e2afe03c1bda91f5f0d9c4fd

SHA512
8c19eb66fb410c22acd6a8b8d2010adcb177c188c56b7cc98a159ab1e7655098b36e83e8edf774260ac1fcc8410d0198d3138d95c090fcbdf381e848dbb78c8b

Download Submit
/data/data/com.cry.cry_handset/databases/cry-db-journal

Filesize
8KB

MD5
465d9f9bc5103a7e9512c531c7d02535

SHA1
23a3f29bf82dee58da14871c281c370804ec3606

SHA256
a771aa57f250bf2b9c593ae690874fa7fe2231449722fd36108906e188e6723f

SHA512
8d77c110da25a40dc7128cc7eda40041bb3b4e940357467ff03c27ca3acb9826c28f44226bf27cdcbd9e6290fcfbb88134a853667d7580e8661deaa770cd6060

Download Submit
/data/data/com.cry.cry_handset/databases/cry-db-journal

Filesize
8KB

MD5
fce99199609cef462d73825e958e6a19

SHA1
3f5930428ee9d292fdb2ba944e8b55f85e0bbead

SHA256
5f64efb446df6556392e93b647438c4ca8d2eec895a128b4961f64e2bc1b3a53

SHA512
1f234802ccca5e5f9b1a5ed7d8c19354ad76239cada8d87a709bc67d734ae601bb146fba678b4391bf54dd89248f378bcd0a5bf64767db67dbf8ffc1c0a3d2db

Download Submit
/data/data/com.cry.cry_handset/files/jpush_stat_cache.json

Filesize
128B

MD5
8388b43f9d19007bd55b83bcd40d21c5

SHA1
779de0524d85718879d9d95df128def69251ac56

SHA256
8fba90d1c67fa82b5a70c5f210360b7bd3db73835eff5c069be11a442280d0ae

SHA512
3a899d63172454e72c42167fd421a267027eb4ede9daf418a31eee44f1343f40da90483c7629847e815aac8f0b364aef4683f607df263ca30f9dc236a6038d23

Download Submit