Analysis

  • max time kernel
    157s
  • max time network
    145s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    24-05-2024 12:15

General

  • Target

    app1.apk

  • Size

    6.2MB

  • MD5

    f72b084405f9fed876c4361903790d11

  • SHA1

    40c7044f4cdb3f0ed2f73d95d21abc4e73263061

  • SHA256

    e6c5bda87d76a180c59a9e97c544abf9fcfcf9ae54ffdf421042fce11040685a

  • SHA512

    9ed5ff31184b2b3659d447a8b5178433e8983565665584ab696e212fb8b0a45cdd57c9dabf24495c88d47b067a3d35c3c8c548689cecf57e05a40fd64dd54506

  • SSDEEP

    98304:l/e46c+WR/KWcWHkqoDa5aqZZlL2DcZUgARDrXIo9ihQY0OsPWLJ2bQe4Z7DSJEP:5RhZKKE3a3m3gAd4JKPWLgQb7D3

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks the presence of a debugger

Processes

  • io.ionic.lmm8
    1⤵
    • Checks CPU information
    • Checks memory information
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/io.ionic.lmm8/databases/_ionicstorage
    Filesize

    3KB

    MD5

    570fea72d91130cdf05c12f6ab5c4431

    SHA1

    315dcf354cdeb4c454cbe93148680c3f0c11a6bc

    SHA256

    5bb65919bed02970d07ae31c79f6d66ff63a63f8d58b25ddc8fbf3d8dc91f73c

    SHA512

    393b4e66d33768303415da29d6b021bc473f6da43baf1e63995f8994f01bdaed580afb65bf9ba949fd7520d6a81a9555d5475ace5d1673180189eabbc52bfc85

  • /data/data/io.ionic.lmm8/databases/_ionicstorage-journal
    Filesize

    512B

    MD5

    4d01c5646addce63dac6690baa10d2dc

    SHA1

    c71d77fa5a5f95e22cdfa2ac12c423049f7f8fe0

    SHA256

    48ac812fad9ffb8cafc118e9532b0231c78cd8588ae0eea1e919432b03e15ac1

    SHA512

    c3ef5415894fd21800a70d8bcd5320163aace7effbf758947b31c1555b78ef1556a1b5f0730e0965323cc804be132352da7238eee195c5909ab70c06f361bf02