Analysis
- max time kernel
174s - max time network
187s - platform
android_x64 - resource
android-x64-arm64-20240514-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system - submitted
26/05/2024, 12:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ttnzd.1.1.93.apk
Resource
android-x86-arm-20240514-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
ttnzd.1.1.93.apk
Resource
android-x64-arm64-20240514-en
8 signatures
150 seconds
General
- Target ttnzd.1.1.93.apk
- Size 14.7MB
- Sample240526-p7a1eaee6t
- SHA256 e9103a1487520aa23c852d9c52d2bf84c014b12c3198713f8c66687e03d31083
- MD5 b0d93f046927e6659b7c72b8014efdf9
- SHA1 f29c04be3a496a5b4f197559bd5a966e8de14940
- SHA512 03b8bb386f24b5fb7abed74d75767388cbef0ecf5cf60c1c8981edd672ddd8308e0a21132856d42d15aa28498bcbe8ae7c52a6393404485ec879a6f51f68ee18
- SSDEEP 393216:5x9KE5rmXhedtwqJXGl82V7H+ylUHgvAhn:5LKomEHJ2XLlUHgvAhn
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo net.yunshi360.ttnzd - Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo net.yunshi360.ttnzd - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener net.yunshi360.ttnzd - Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses net.yunshi360.ttnzd - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock net.yunshi360.ttnzd - Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo net.yunshi360.ttnzd - Reads information about phone network operator. 1 TTPs
- Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /storage/emulated/0/data/.push_deviceid
- Size 32B
- SHA256 96bdad319a4e543c822c992bdb0eb7b9c379bef507520eecf5535f30969d0b9b
- MD5 9b56ee899d4651eb7db3afcf53b6a9d0
- SHA1 0fc2bc05ae6956c8ad8df1bc14896b15c1433818
- SHA512 de650dc4e2c61c5bddb2da5ddf7c156213b530841124c80fb113810f37a8634013bb8878848b07f72af4be28ac350c0951e642ce6fed893ce84d6a7bfd96ffb5
- MD5 SHA1 SHA512