Analysis

  • max time kernel
    168s
  • max time network
    145s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    24-05-2024 11:40

General

  • Target

    app4.apk

  • Size

    6.2MB

  • MD5

    ee2a7ba2bf44336212036ca1956dd66a

  • SHA1

    72338d4e663effbd3eba6981dfdf2845901adb5d

  • SHA256

    9a731120b2e7e19a292abbc2f3a0470035c9e58f2ecfcd12d572ba9c7ef58077

  • SHA512

    c010007b1335fc0a7f611d2a6a82ba91047e4e045ef132f955bc8fa6382d16e947fb55426c5a81a990317eb69b1ff49743ab1a81dfabf4fe0872199fe4aab57e

  • SSDEEP

    98304:vQkVd/YPabtvNqZmoD9WcWHkAtu23UgAWZ7DSJE6PI8DrXIo9ihQY0OsPWLJ2bQs:fd/YPahS9KEZjgAe7Dm4JKPWLgQs

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks the presence of a debugger

Processes

  • io.ionic.lmm10
    1⤵
    • Checks CPU information
    • Checks memory information
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:5113

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/io.ionic.lmm10/databases/_ionicstorage
    Filesize

    3KB

    MD5

    570fea72d91130cdf05c12f6ab5c4431

    SHA1

    315dcf354cdeb4c454cbe93148680c3f0c11a6bc

    SHA256

    5bb65919bed02970d07ae31c79f6d66ff63a63f8d58b25ddc8fbf3d8dc91f73c

    SHA512

    393b4e66d33768303415da29d6b021bc473f6da43baf1e63995f8994f01bdaed580afb65bf9ba949fd7520d6a81a9555d5475ace5d1673180189eabbc52bfc85

  • /data/data/io.ionic.lmm10/databases/_ionicstorage-journal
    Filesize

    512B

    MD5

    5504f1cab93d499eb8c702e3d66824a4

    SHA1

    0ed6789976691cfb950134ca1fe33186fed5549a

    SHA256

    0fbdbc9f3b94da667cc5cb5d13413401a220655a5c42001a6609853d0818b916

    SHA512

    b0e78b0f5c5a4808fc0a1257aaf408d2c2fe323816c968d1c51bec6469ef6a4360640846ae70c4b93b5a08132cd20eda7a893f1a96a1be98456c956c87b66c51