Analysis

  • max time kernel
    49s
  • max time network
    152s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    24-05-2024 12:38

General

  • Target

    OutWharehouse.apk

  • Size

    3.7MB

  • MD5

    b664079e5047f64bc7522439050ab2be

  • SHA1

    9e7ffdab577e535332a51bd2d9a0585fccebec5e

  • SHA256

    2da84e69b8819a08ea9debb7372321374a93cea0d11f347096edeea21acbddf2

  • SHA512

    c18347bc38f0504fab537afbd81eab2819ca25c125a80bd51c5822827916c6e68931ad36efa25463858b759eb2134fbb20124f8a83af71bbb8605466aaf5b4fa

  • SSDEEP

    98304:FH9aTVfHKKKPlKXet8/XYY9djtqhWdbMuUruwt5a8:7utHXA+YY9dpqkdbMuUruwtU8

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks the presence of a debugger

Processes

  • io.cordova.outwarehose
    1⤵
    • Checks CPU information
    • Checks memory information
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:5087

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads