Analysis

  • max time kernel
    162s
  • max time network
    155s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    24-05-2024 11:44

General

  • Target

    ttnzd_20161123.apk

  • Size

    2.3MB

  • MD5

    763880f5402eb8610cc159525a1e74a0

  • SHA1

    4a99c641477d7b26f8c6d63a62253c7bdb2d922e

  • SHA256

    6b00733e4334ca53bb5a867945afad0f6ae19266da7c25dc15cdfa3749957465

  • SHA512

    333855da78160a4355aedaac051c1d1e5eda9bdec47b75c9a6ab0c0561fd8f98ded6db9792cefe05861cad83b60fd8edd646bce841923fd27786dbd476a4f116

  • SSDEEP

    49152:ehEIzBmvpJZQYtMAO+CXa4LtuGZJMTwkad++rjNn4Y22t/h4Mk3JamtG:fIBmVQYtMAO+CKkgwrfjp4Yhnk3JamtG

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks the presence of a debugger

Processes

  • net.yunshi360.ttnzd
    1⤵
    • Checks CPU information
    • Checks memory information
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4302

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads