Analysis

  • max time kernel
    159s
  • max time network
    153s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    24-05-2024 12:27

General

  • Target

    app8.apk

  • Size

    6.2MB

  • MD5

    646d5f28ee20dd11ab11710543cb8e50

  • SHA1

    3595ca48868c68e9fad512ab8a10499228bfa087

  • SHA256

    e35599b4f61a433e154780cba615ca3017a5cb1bdd3b29e933916af2f18ccc0c

  • SHA512

    e1f426f006c08b1ff0edbb52f72d8454ce9f3cf61f67c0692fd2811308f35e0075d057f2b0745a02568f41fa4cc90c13f91e420eea92fb4ed6c710b18711292f

  • SSDEEP

    196608:8T8/GNYpI1PM1WTpqY94J+gQqgAe7DqPWX:a8WYpI1DpqY9q+wgAe66

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks the presence of a debugger

Processes

  • io.ionic.lmm11
    1⤵
    • Checks CPU information
    • Checks memory information
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4187

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/io.ionic.lmm11/databases/_ionicstorage
    Filesize

    3KB

    MD5

    570fea72d91130cdf05c12f6ab5c4431

    SHA1

    315dcf354cdeb4c454cbe93148680c3f0c11a6bc

    SHA256

    5bb65919bed02970d07ae31c79f6d66ff63a63f8d58b25ddc8fbf3d8dc91f73c

    SHA512

    393b4e66d33768303415da29d6b021bc473f6da43baf1e63995f8994f01bdaed580afb65bf9ba949fd7520d6a81a9555d5475ace5d1673180189eabbc52bfc85

  • /data/data/io.ionic.lmm11/databases/_ionicstorage-journal
    Filesize

    512B

    MD5

    54edc5520b72e8a2366dae898287b887

    SHA1

    507e5658949d5b4135239314057789acf02670c6

    SHA256

    24f3bb9a3346d2a501dc848134bcabd9fa71ad3165607d1ae149a701b29e71c2

    SHA512

    80be5ef56d57bb4c729f5a0f3d2cecb18248f3806f87278c85ff868380080977a113d4ade928113691785120d7b8db65d00a9e8fb80d19cc8ee9dfc5cede886d