Analysis
- max time kernel
169s - max time network
131s - platform
android_x64 - resource
android-x64-20240514-en - resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system - submitted
26/05/2024, 12:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
20190603Nodeggh.apk
Resource
android-x86-arm-20240514-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
20190603Nodeggh.apk
Resource
android-x64-20240514-en
6 signatures
150 seconds
General
- Target 20190603Nodeggh.apk
- Size 5.7MB
- Sample240526-ph8v5scf78
- SHA256 ce692d7669806ec428a239b477b055c8e980048048ea96a7d01e1ce7a0780214
- MD5 9e756ad2d90eafc9075654f9db84e0be
- SHA1 92deba0c94dd9820a4abf34076729bd6a686d628
- SHA512 f61260accf09c9ae341091c18ac1a2b8b55ff393b0a02fedb15f4c6498324e1ae29ad00bc3a93cb264205b3b362c71ec466795f2f0509ae18c3ccddbef0558f3
- SSDEEP 98304:XfsiTbMhexx5OF2+MfWd9oMvL9M7DL9eAyEW+k+9UkcXGwFOaQVpWC1TZ9vQZaUY:vsaYYbF+r9o8fS2XuaQuC1VpvUsPbpr
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.notes.autoid9 - Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.notes.autoid9 - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.notes.autoid9 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.notes.autoid9 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.notes.autoid9 - Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.notes.autoid9/databases/_ionicstorage
- Size 3KB
- SHA256 d40cab18b3a47b83b70463ebeae940f63562ab5f26309aba4313417df0e9c0c3
- MD5 13068d4579275d45c22c3aff3d53e26d
- SHA1 5a172b4bf8b76d3575849999a0a90d3455f9da3b
- SHA512 c4aa5203fcbabd1ab535564bd1817b86d4238f0084e7dc14f4f325fd631d11bf788c703174f03a1d92aaa74d0b9b1f2af04d63f6449cffb60a49b8576c7f62ff
- MD5 SHA1 SHA512
- Path /data/data/com.notes.autoid9/databases/_ionicstorage-journal
- Size 512B
- SHA256 949737832918f71880ade5fdcb696b09f01da21e28512b37b379e7a03f68d653
- MD5 8f7aa6ea6de784738d99484be1b4d16c
- SHA1 0dcf539dfde0056f26124c64d153d5cc4a3d9092
- SHA512 ac080cdb3134ca6e2af6284ed93d272e129c8df5f465818c0d8231cbaf379bd8810d4cd45bfd7760e1c65bb3d5767b0bfc6474123d46e79aec6cc21b20bc4ada
- MD5 SHA1 SHA512
- Path /data/data/com.notes.autoid9/databases/_ionicstorage-journal
- Size 3KB
- SHA256 40c2f38b5c003da577de9cc713d97265f3016925809a21ec3acb89892621468b
- MD5 3110a0e2359ff81c3d695b36093a7bc0
- SHA1 7865de17549ceee049b20efe5a8c5b543fec8082
- SHA512 04eea4d29296e9bc09f4ff6771816cb7a44a1c9fe0298c69e87b81d06553745263ed707e58b4627510d47faee27ee72d9e2f0a046a4b997233193f52456232cc
- MD5 SHA1 SHA512