Analysis

  • max time kernel
    13s
  • max time network
    187s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    29-05-2024 22:55

General

  • Target

    c2e8ace468cfe7c8860e55c03af46e32c9bb69f213a52a145854317e209e6a75.apk

  • Size

    145KB

  • MD5

    52d1bd3c24c65169284cb9aaa0616313

  • SHA1

    338bfddbed8f7e1bcd1ff607904b611cce13a528

  • SHA256

    c2e8ace468cfe7c8860e55c03af46e32c9bb69f213a52a145854317e209e6a75

  • SHA512

    c24ad9829d33fe467f5d07bce8edfd3449d5a83591f56cb5b034165688d96f58c68bbe546df192c94fccc756c5cb09184d4c2a3cb0201cd0846209c50f8c6c25

  • SSDEEP

    1536:v+2IXxw3USJ8GsWFv4XT8GsWFv4X88GsWFv4XlVRAFibB4myBcs7+AQSkIIrNk8E:v+d07i3E33EC3EkDBMBx7+A5X4+3EY

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Queries the phone number (MSISDN for GSM devices) 1 TTPs
  • Reads the contacts stored on the device. 1 TTPs 1 IoCs
  • Tries to add a device administrator. 2 TTPs 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs

Processes

  • com.Soqlqjst.Purityid
    1⤵
    • Reads the contacts stored on the device.
    • Tries to add a device administrator.
    • Checks if the internet connection is available
    PID:4532

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.Soqlqjst.Purityid/app_config/config
    Filesize

    42B

    MD5

    112c743331c7353c93c314a155e49b24

    SHA1

    e98a41e96a4b6ca35cd5711ef5f15b298cbbc373

    SHA256

    5c8fefceb71215e1402307f68ee98d1b3df56a9a2233672bd478b08244c1e46c

    SHA512

    0dbccae8f35f2d77f6a93d839ca6d40d609159f3937bcc72d5cf6a4fdadbe2695310fafd06e7fa1cfbcc5d8af464d9eab97cd27657bd8ccb7cff1f6336bcedac