Analysis

  • max time kernel
    160s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    24-05-2024 12:07

General

  • Target

    app7.apk

  • Size

    6.2MB

  • MD5

    a2f25e5e95fdd8935d5e3b334e16c99e

  • SHA1

    462d86dbf193f9843eec9f2a9149223fa1ae5038

  • SHA256

    8edf9c5f5b067d270e3b2a3a6545bf956f0723bc7b29c7f2bae4774fe1a7d295

  • SHA512

    3b31039661cc9cf50520ed16859f89c63d3060a60ff4ff18d6302ab39dd0d946e6ca0bb91f916b6c839b6296cac00e2c8ef21c81cc2f3b11385aaf7a419e289f

  • SSDEEP

    98304:dEpqF7Fzp95mGFkJFwMqZtoDDWcWHkyOztlx9WUgAWZ7DSJE6PI8DrXIo9ihQY0d:dX7FzFmGFdYDKEyyfgAe7Dm4JKPWLgQ6

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks the presence of a debugger

Processes

  • io.ionic.lmm10
    1⤵
    • Checks CPU information
    • Checks memory information
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4237

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/io.ionic.lmm10/databases/_ionicstorage
    Filesize

    3KB

    MD5

    570fea72d91130cdf05c12f6ab5c4431

    SHA1

    315dcf354cdeb4c454cbe93148680c3f0c11a6bc

    SHA256

    5bb65919bed02970d07ae31c79f6d66ff63a63f8d58b25ddc8fbf3d8dc91f73c

    SHA512

    393b4e66d33768303415da29d6b021bc473f6da43baf1e63995f8994f01bdaed580afb65bf9ba949fd7520d6a81a9555d5475ace5d1673180189eabbc52bfc85

  • /data/data/io.ionic.lmm10/databases/_ionicstorage-journal
    Filesize

    512B

    MD5

    4dbe491eaffd39a08c2e8b4b21b384e4

    SHA1

    a5922c258ada7ae828c809825f1dbfc80b41abac

    SHA256

    d49ac3e5af46c259518263fc2c7fc10d500683f77b2dfda99fd7032916479118

    SHA512

    7b0849a775a4b922e12e7a2851e6a738958b918c43f05cefad2e783b9a9f7d2310b9dc1d3f88cda0a710178baf6a2b5f1f27b427880c3da7e8e8667da752c76d