Analysis
-
max time kernel
66s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
24-05-2024 12:28
Static task
static1
Behavioral task
behavioral1
Sample
OBonQuignon.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
OBonQuignon.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
OBonQuignon.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
OBonQuignon.apk
-
Size
2.7MB
-
MD5
b3423a174ccf4658f626db2b0341fb80
-
SHA1
28abb394619b29bf1acf01642a3b604d68d5457b
-
SHA256
6d59d02b1a4281dd74168dd3264b87792e27570f6f12c213d5b8f4335f489197
-
SHA512
b6b68f75d8a44719d56f4b938c43343de36e1a6eab8447fe425f327f6ab933ff22e64933cd194ab07fe5935308ddf2631f8914d71676588c3380b6dc36ed7227
-
SSDEEP
49152:1LVeGpNhyx/tM6JVWr7QTeI9qcjnc734w9H5Dn/jvkQZe:1J3pNwJtM6CkaIvLA9H5r/7be
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
com.quignonapp.appdeploydescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.quignonapp.appdeploy -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
com.quignonapp.appdeploydescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.quignonapp.appdeploy -
Checks the presence of a debugger