Analysis
-
max time kernel
10s -
max time network
185s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
-
submitted
01-06-2024 00:40
General
-
Target
bf7aeedd068639437b11c98ac589862ed4a6313ac6f90f803b1b36d711d634f6.apk
-
Size
145KB
-
MD5
99ac993b7856e6ae23758d17e832dffc
-
SHA1
8607ca497054bcce6c230230a674c5d5d5b77567
-
SHA256
bf7aeedd068639437b11c98ac589862ed4a6313ac6f90f803b1b36d711d634f6
-
SHA512
cb958e0fa84156a038be1301255781b3ad429a637d0c7f785a75d7d5465cee162708ad046973f2b48c8345b3f851c63bafaa61b72d294f02416b2fc89a9962cd
-
SSDEEP
3072:g0743ES3Eb3EnZuqclOv/HAg0aS1XJl3EIu:xNlOngbaSLZu
Score
8/10
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries the phone number (MSISDN for GSM devices) 1 TTPs
-
Reads the contacts stored on the device. 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Tries to add a device administrator. 2 TTPs 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes
-
com.Zrgmkpdq.Rlofgsau1⤵
- Reads the contacts stored on the device.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Tries to add a device administrator.
- Checks if the internet connection is available
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.Zrgmkpdq.Rlofgsau/app_config/configFilesize
42B
MD53556f26122efc707a4a13de2294adf5f
SHA1fb372d395b741b26c1eb28868f5a5ab6332cfc75
SHA2569a0df22c6c42011cccf004a64e5e55683f0fca4112fee75b95217fe87e6daad2
SHA512a87ecff604f656a4c8d702d92845429eb14582bc957a042b692e27b699d74b7c59b436427a9449aed18b879ee258edcec9512fad1a627b29ca408e4b56c31fa0