Analysis
-
max time kernel
135s -
max time network
184s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
-
submitted
24-05-2024 11:47
General
-
Target
scj.apk
-
Size
7.7MB
-
MD5
3a5b583cea64834856d578894ea3ecb6
-
SHA1
a355bed5b66b0b65beb217572012cdf945a2a3a8
-
SHA256
ea17fb44de4d788e47d79f203d21e11c8c863e993f4680bdac4f560407e8e221
-
SHA512
0d495d86b0e7eb832543fd12efba291f292ce60a98938866a4fb2d6679aa4c217fa9c6fa3c74f7fc12c196f8f4ead0cf21d0ff97e38e56843758099085a3cd71
-
SSDEEP
98304:5dAMt1pjU0C7RbwT+1zFlrp90yWbmaW/xVcYQUSsm/eCvSaVTFAJgPrxkB85zXOk:5uMt1po0C76mz5lK+paqiNVgS68tXb
Score
8/10
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
-
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
com.s498632209.qxj1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks memory information
- Queries information about running processes on the device
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)