Analysis
- max time kernel
10s - max time network
188s - platform
android_x64 - resource
android-x64-20240514-en - resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system - submitted
01/06/2024, 00:40
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
bf7aeedd068639437b11c98ac589862ed4a6313ac6f90f803b1b36d711d634f6.apk
Resource
android-x86-arm-20240514-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
bf7aeedd068639437b11c98ac589862ed4a6313ac6f90f803b1b36d711d634f6.apk
Resource
android-x64-20240514-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
bf7aeedd068639437b11c98ac589862ed4a6313ac6f90f803b1b36d711d634f6.apk
Resource
android-x64-arm64-20240514-en
5 signatures
150 seconds
General
- Target bf7aeedd068639437b11c98ac589862ed4a6313ac6f90f803b1b36d711d634f6.apk
- Size 145KB
- Sample240601-az7bbabd8y
- SHA256 bf7aeedd068639437b11c98ac589862ed4a6313ac6f90f803b1b36d711d634f6
- MD5 99ac993b7856e6ae23758d17e832dffc
- SHA1 8607ca497054bcce6c230230a674c5d5d5b77567
- SHA512 cb958e0fa84156a038be1301255781b3ad429a637d0c7f785a75d7d5465cee162708ad046973f2b48c8345b3f851c63bafaa61b72d294f02416b2fc89a9962cd
- SSDEEP 3072:g0743ES3Eb3EnZuqclOv/HAg0aS1XJl3EIu:xNlOngbaSLZu
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Queries the phone number (MSISDN for GSM devices) 1 TTPs
- Reads the contacts stored on the device. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://com.android.contacts/data/phones com.Zrgmkpdq.Rlofgsau - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.Zrgmkpdq.Rlofgsau - Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.Zrgmkpdq.Rlofgsau
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.Zrgmkpdq.Rlofgsau/app_config/config
- Size 42B
- SHA256 af5c9548cad8f96aa82be465e528e491f92cab572b33387af2841608d4c63739
- MD5 b6b10e371be9b3060975f14ea1cf65e3
- SHA1 b80ce0a9d8c6101b29207beaa171af2da78f45d9
- SHA512 e0293a61218e776204c1b388c62e6ad4096e427a030284deec571cc7468f6681155b7a10d2798891d861d983356cde55f8d5cb964abe994cb877520bd10bb2a2
- MD5 SHA1 SHA512