Analysis

  • max time kernel
    158s
  • max time network
    156s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    24-05-2024 12:51

General

  • Target

    app2.apk

  • Size

    6.2MB

  • MD5

    943921b03585433fb292bb12f7f3824b

  • SHA1

    c6ec572687d6699d2f2170103a1134b1327a34f7

  • SHA256

    dec45adae23b0883c5f34c054b030c878ea224045508ee6e35cc158e9f372347

  • SHA512

    0fdf12a10a549e401fc0787415ea548993eec045167348b5b40683c0643d9964c75adf26adac875572094da6590d36bb31b9ec60f0c669f5052c285eac8bdc9a

  • SSDEEP

    98304:9BqE7EI1N694qCYqZQAWWcWHkKooD0MpomQY0OsPWLJ2bQe4Z7DSJE6PI8DrXIo8:9T7N03vKEKVW1PWLgQb7Dm4JwgAi

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks the presence of a debugger

Processes

  • io.ionic.lmm9
    1⤵
    • Checks CPU information
    • Checks memory information
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/io.ionic.lmm9/databases/_ionicstorage
    Filesize

    3KB

    MD5

    570fea72d91130cdf05c12f6ab5c4431

    SHA1

    315dcf354cdeb4c454cbe93148680c3f0c11a6bc

    SHA256

    5bb65919bed02970d07ae31c79f6d66ff63a63f8d58b25ddc8fbf3d8dc91f73c

    SHA512

    393b4e66d33768303415da29d6b021bc473f6da43baf1e63995f8994f01bdaed580afb65bf9ba949fd7520d6a81a9555d5475ace5d1673180189eabbc52bfc85

  • /data/data/io.ionic.lmm9/databases/_ionicstorage-journal
    Filesize

    512B

    MD5

    95f107b78154cb59d4be9cf5f92c3a74

    SHA1

    f1a09c87de675df6c1c61ef01c91c2afca3d08a2

    SHA256

    dae34793f8b1005883fbfcc6cd04de9c6729e2552a29f221645431a934b8d1ac

    SHA512

    d9ab7024a26c077c4e50dfff19f66095a674e0e0cef7be5f0960646cd7a05c3c4eb74b5f63feaa27b14bafaf5312cf4dd0a5111c9fb8ddf61eecca4c1d19ed7e