Analysis

  • max time kernel
    49s
  • max time network
    167s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    24-05-2024 12:59

General

  • Target

    app3.apk

  • Size

    6.2MB

  • MD5

    93ccab42d2a0b21b79d5327c0a2bbf8d

  • SHA1

    6ef7d44dffbe5d437b800ec5c27db59f0f73cbb9

  • SHA256

    2f83fc274a7eece93357394c2c829d3339a2de39d5678b9d3b98e1060d9ba452

  • SHA512

    c9467be5da79a25d86e89dce7646388508ed59bde0b56748e6e3183497c251db572dd61c0116e766e50dcad56caf0cfb77b833bd216e250fc20a1423aa0a6e9b

  • SSDEEP

    98304:yxfKSaFSWvboD9tDWcWHkOqZFq3dcUgARDrXIo9i+J2bQeoQY0OsPW2Z7DSJE6P/:Lxvg9xKEGZgAd4J+gQYPW+7DU

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks the presence of a debugger

Processes

  • io.ionic.lmm10
    1⤵
    • Checks CPU information
    • Checks memory information
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:5105

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/io.ionic.lmm10/databases/_ionicstorage
    Filesize

    3KB

    MD5

    570fea72d91130cdf05c12f6ab5c4431

    SHA1

    315dcf354cdeb4c454cbe93148680c3f0c11a6bc

    SHA256

    5bb65919bed02970d07ae31c79f6d66ff63a63f8d58b25ddc8fbf3d8dc91f73c

    SHA512

    393b4e66d33768303415da29d6b021bc473f6da43baf1e63995f8994f01bdaed580afb65bf9ba949fd7520d6a81a9555d5475ace5d1673180189eabbc52bfc85

  • /data/data/io.ionic.lmm10/databases/_ionicstorage-journal
    Filesize

    512B

    MD5

    f732cd859a491a2fc236c34e8a0aa7cb

    SHA1

    353e766bf270025b43c3f6ac94a23a21505fa1dc

    SHA256

    7e75a97d35f2662667dd6387df5717ed9d3999c45a45ec49674a93abdbb56c7b

    SHA512

    7743485407151cd45aaa7387676db522eb113b232b1f664b7bce7fd6328f143d9bb7595d543403dda97fe11aa2746d0743d597bfef5660c0b92ee22c8e079c8d