Analysis

  • max time kernel
    160s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    24-05-2024 13:16

General

  • Target

    app.apk

  • Size

    6.3MB

  • MD5

    f0033d4b3bad0340894cba29650a6464

  • SHA1

    4cde57a6e116e41b7dad0d3dbae104b554c227cf

  • SHA256

    9953a318d8fa00111ee58e8ea1728718457ca070b2377e81db97553c80efbf7c

  • SHA512

    976caf9f016196c1cb9d661d3b250b1868c22404c0349f9679f9b39ede14e32d803f65d9daf0f936d2d43bfa763a075fc307cf96fe91de5ed9e1de00cb11ad70

  • SSDEEP

    98304:WXrIAvEBdXdOlqZlYfoDhrbLIB9TYIZ7DSJE6PIRUgArJ2bQeoQY0OsPWxDrXIoS:WXkAvEBdXgZEd/hk7DQgArgQYPW94J5

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks the presence of a debugger

Processes

  • io.ionic.lmm13
    1⤵
    • Checks CPU information
    • Checks memory information
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4254

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/io.ionic.lmm13/databases/_ionicstorage
    Filesize

    3KB

    MD5

    570fea72d91130cdf05c12f6ab5c4431

    SHA1

    315dcf354cdeb4c454cbe93148680c3f0c11a6bc

    SHA256

    5bb65919bed02970d07ae31c79f6d66ff63a63f8d58b25ddc8fbf3d8dc91f73c

    SHA512

    393b4e66d33768303415da29d6b021bc473f6da43baf1e63995f8994f01bdaed580afb65bf9ba949fd7520d6a81a9555d5475ace5d1673180189eabbc52bfc85

  • /data/data/io.ionic.lmm13/databases/_ionicstorage-journal
    Filesize

    512B

    MD5

    5b074e2667ab737c8cd2cb2188fa9827

    SHA1

    54250342705a613ace880ee6ad4c3b2acaa17c6c

    SHA256

    829a49221453a59f38e46389c4564a9bc6f2ec2fdda481595c40fe656701d617

    SHA512

    78a6c5979b16eb73e5aab301dd07a94078540478e3a61672e5eecf7ecc4fe4c0d727c70128f0c938616c327733522bff11867ab2a423214a2f5f9268791f5d12