Analysis

  • max time kernel
    158s
  • max time network
    149s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    24-05-2024 13:06

General

  • Target

    app6.apk

  • Size

    6.2MB

  • MD5

    e90177e871c21e05aea5550351695f6c

  • SHA1

    b80d1d5c5428f6eb0e9be4a36a6fce017e017de6

  • SHA256

    4fe722be16849483681144dca7a158931faec5a7d924b7bd2df62c95d9b06100

  • SHA512

    c42b8740be6bb92599b30437b6883be59ff17c81fc748c1306f9dbbb813d3080d78ff88864660ff539d842637b545c4a540297dde4e71a52c114f40041db69f7

  • SSDEEP

    98304:sDTpXv8fMQI5rzPCTQoDgWcWHkgqZ2l1Qd0YDrXIo9ihQY0OsPW2Z7DSJE6PIRUN:sDTPQIZji9gKEoIX4JKPW+7DQgArgQr

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks the presence of a debugger

Processes

  • io.ionic.lmm10
    1⤵
    • Checks CPU information
    • Checks memory information
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4287

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/io.ionic.lmm10/databases/_ionicstorage
    Filesize

    3KB

    MD5

    570fea72d91130cdf05c12f6ab5c4431

    SHA1

    315dcf354cdeb4c454cbe93148680c3f0c11a6bc

    SHA256

    5bb65919bed02970d07ae31c79f6d66ff63a63f8d58b25ddc8fbf3d8dc91f73c

    SHA512

    393b4e66d33768303415da29d6b021bc473f6da43baf1e63995f8994f01bdaed580afb65bf9ba949fd7520d6a81a9555d5475ace5d1673180189eabbc52bfc85

  • /data/data/io.ionic.lmm10/databases/_ionicstorage-journal
    Filesize

    512B

    MD5

    0c3a4cb5598e237869a7b2f184588a8c

    SHA1

    e184b7d55afba03a637315d39732b324b8c64abc

    SHA256

    4e622832f030ce137e230b290b23fdcb5286597463b07f0cadfd522880150ed7

    SHA512

    6d111d8f4711583dc6b4de493b1d280bb8265a661977805e852ae5eb442aad97fc0daac8e38afb5ee66d261e612afdc88135900527b9d4c9516a0a5f732e609a