Analysis

  • max time kernel
    10s
  • max time network
    186s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    29-05-2024 22:55

General

  • Target

    c2e8ace468cfe7c8860e55c03af46e32c9bb69f213a52a145854317e209e6a75.apk

  • Size

    145KB

  • MD5

    52d1bd3c24c65169284cb9aaa0616313

  • SHA1

    338bfddbed8f7e1bcd1ff607904b611cce13a528

  • SHA256

    c2e8ace468cfe7c8860e55c03af46e32c9bb69f213a52a145854317e209e6a75

  • SHA512

    c24ad9829d33fe467f5d07bce8edfd3449d5a83591f56cb5b034165688d96f58c68bbe546df192c94fccc756c5cb09184d4c2a3cb0201cd0846209c50f8c6c25

  • SSDEEP

    1536:v+2IXxw3USJ8GsWFv4XT8GsWFv4X88GsWFv4XlVRAFibB4myBcs7+AQSkIIrNk8E:v+d07i3E33EC3EkDBMBx7+A5X4+3EY

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Queries the phone number (MSISDN for GSM devices) 1 TTPs
  • Reads the contacts stored on the device. 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs

Processes

  • com.Soqlqjst.Purityid
    1⤵
    • Reads the contacts stored on the device.
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    PID:5098

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.Soqlqjst.Purityid/app_config/config
    Filesize

    42B

    MD5

    46bd4a1acb714989b7291cd22c940dfb

    SHA1

    c11475090903a4af642d634b1b95b6c25a58f1dd

    SHA256

    9727e884530eee0331609047d04b469069da51ccaadec609463098b59c749649

    SHA512

    4377e3e59a4a0446201a4c6a3352f0ec01bdb26a0d064f38bd73ad0a5c601c989f11e7e146963ae9134e2a1c25b6ccd2b0143ff5d4b3af283377301ba99df0f7