Analysis

  • max time kernel
    161s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    24-05-2024 12:59

General

  • Target

    app5.apk

  • Size

    6.2MB

  • MD5

    7bd93ad57b4f8d24068e988077520497

  • SHA1

    a1cb386a9015863c16755bd6d36787a9e6c9b906

  • SHA256

    dd218c590933f666bc4708236fc1392ea92c937a41ceb3a209a58e9fa200d5c1

  • SHA512

    85dc3396121655ab7a1bcd170b9ad5367c77f7184a849b3d97409a4361c26ab8049b405515310353d7af90ce7b2d7139bc896e7f5b38a6149ed4f4f160695bf2

  • SSDEEP

    98304:8x4FwQYf7LXjoDGCvWcWHkTqZIlwFeJ2bQe4Z7DSJE6PI8DrXIo9ihQY0OsPWuUx:8zQYf3oGiKESegQb7Dm4JKPWNgAt

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Checks the presence of a debugger

Processes

  • io.ionic.lmm10
    1⤵
    • Checks CPU information
    • Checks memory information
    • Obtains sensitive information copied to the device clipboard
    PID:4567

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/io.ionic.lmm10/databases/_ionicstorage
    Filesize

    3KB

    MD5

    570fea72d91130cdf05c12f6ab5c4431

    SHA1

    315dcf354cdeb4c454cbe93148680c3f0c11a6bc

    SHA256

    5bb65919bed02970d07ae31c79f6d66ff63a63f8d58b25ddc8fbf3d8dc91f73c

    SHA512

    393b4e66d33768303415da29d6b021bc473f6da43baf1e63995f8994f01bdaed580afb65bf9ba949fd7520d6a81a9555d5475ace5d1673180189eabbc52bfc85

  • /data/user/0/io.ionic.lmm10/databases/_ionicstorage-journal
    Filesize

    512B

    MD5

    c4df89c80fe9c23b57fb9c19c2fc18d3

    SHA1

    50959be602909e78b1516d80ce5d8882380125ce

    SHA256

    6590233e11ecfe2c15a87647804d5963ee0b38786c57b85094b3a5295bd0542c

    SHA512

    50b1c4e59f74cd2e34a5ccccf2a3fc016102f883333d45407bbde5d5bbabbfe4f191a384aa41d9f8c505725f1200d3eb4fcf1847e8c3778fe1535e77c61bbcf5