Analysis
- max time kernel
49s - max time network
167s - platform
android_x64 - resource
android-x64-20240514-en - resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system - submitted
24/05/2024, 12:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
app3.apk
Resource
android-x86-arm-20240514-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
app3.apk
Resource
android-x64-20240514-en
6 signatures
150 seconds
General
- Target app3.apk
- Size 6.2MB
- Sample240524-p8bckaea71
- SHA256 2f83fc274a7eece93357394c2c829d3339a2de39d5678b9d3b98e1060d9ba452
- MD5 93ccab42d2a0b21b79d5327c0a2bbf8d
- SHA1 6ef7d44dffbe5d437b800ec5c27db59f0f73cbb9
- SHA512 c9467be5da79a25d86e89dce7646388508ed59bde0b56748e6e3183497c251db572dd61c0116e766e50dcad56caf0cfb77b833bd216e250fc20a1423aa0a6e9b
- SSDEEP 98304:yxfKSaFSWvboD9tDWcWHkOqZFq3dcUgARDrXIo9i+J2bQeoQY0OsPW2Z7DSJE6P/:Lxvg9xKEGZgAd4J+gQYPW+7DU
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo io.ionic.lmm10 - Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo io.ionic.lmm10 - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener io.ionic.lmm10 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone io.ionic.lmm10 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver io.ionic.lmm10 - Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/io.ionic.lmm10/databases/_ionicstorage
- Size 3KB
- SHA256 5bb65919bed02970d07ae31c79f6d66ff63a63f8d58b25ddc8fbf3d8dc91f73c
- MD5 570fea72d91130cdf05c12f6ab5c4431
- SHA1 315dcf354cdeb4c454cbe93148680c3f0c11a6bc
- SHA512 393b4e66d33768303415da29d6b021bc473f6da43baf1e63995f8994f01bdaed580afb65bf9ba949fd7520d6a81a9555d5475ace5d1673180189eabbc52bfc85
- MD5 SHA1 SHA512
- Path /data/data/io.ionic.lmm10/databases/_ionicstorage-journal
- Size 512B
- SHA256 7e75a97d35f2662667dd6387df5717ed9d3999c45a45ec49674a93abdbb56c7b
- MD5 f732cd859a491a2fc236c34e8a0aa7cb
- SHA1 353e766bf270025b43c3f6ac94a23a21505fa1dc
- SHA512 7743485407151cd45aaa7387676db522eb113b232b1f664b7bce7fd6328f143d9bb7595d543403dda97fe11aa2746d0743d597bfef5660c0b92ee22c8e079c8d
- MD5 SHA1 SHA512