Analysis

  • max time kernel
    157s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    24-05-2024 11:41

General

  • Target

    app0.apk

  • Size

    7.5MB

  • MD5

    e27d8392696956d77f75fae7191e641e

  • SHA1

    973e932e7c04e1d6606eebb960dc4ce5a635dd46

  • SHA256

    372c044485e5798002a476bce7edbf8f97de78bdb8b81e0917a5e0d48fca166a

  • SHA512

    96127ef376514bc70a7a0cdaa4e87238811b8793323e33fdbfa96381f11884ab2e4219ee6cb3057371e094ffe4eb29ef6e71fafc190f4adecde2330aaff3996c

  • SSDEEP

    196608:PHWMaZMJsWzKE3AfMDgf8wgQqgAd4JZ7DqPWy:Ooq43AUMf8wwgAdqZ65

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks the presence of a debugger

Processes

  • io.ionic.lmm5
    1⤵
    • Checks CPU information
    • Checks memory information
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4263

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/io.ionic.lmm5/databases/_ionicstorage
    Filesize

    3KB

    MD5

    570fea72d91130cdf05c12f6ab5c4431

    SHA1

    315dcf354cdeb4c454cbe93148680c3f0c11a6bc

    SHA256

    5bb65919bed02970d07ae31c79f6d66ff63a63f8d58b25ddc8fbf3d8dc91f73c

    SHA512

    393b4e66d33768303415da29d6b021bc473f6da43baf1e63995f8994f01bdaed580afb65bf9ba949fd7520d6a81a9555d5475ace5d1673180189eabbc52bfc85

  • /data/data/io.ionic.lmm5/databases/_ionicstorage-journal
    Filesize

    512B

    MD5

    b4aa6ce39326341581eaa5f492bf8f69

    SHA1

    aef164f831722777693095dad70520d8cea91bca

    SHA256

    3bd25cd8acb7958435f5ea10b42f3b01389330f93d308c88e02b8c422e29f1cc

    SHA512

    7ded011dc844e3c7a047bd153ad9d6599bbb6b376abc23745921fd5266a41d0aee551f48f6a4b106b13f2d758d3c30e8470dc6f8b1fc3aefbb6bfa4362924372