Analysis
- max time kernel
179s - max time network
131s - platform
android_x86 - resource
android-x86-arm-20240514-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system - submitted
02/06/2024, 23:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ff5ab26128b5cbbc7e99ea77c471890be6bd4bdedf0d5f5da75b8b665281ac13.apk
Resource
android-x86-arm-20240514-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
ff5ab26128b5cbbc7e99ea77c471890be6bd4bdedf0d5f5da75b8b665281ac13.apk
Resource
android-x64-20240514-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
ff5ab26128b5cbbc7e99ea77c471890be6bd4bdedf0d5f5da75b8b665281ac13.apk
Resource
android-x64-arm64-20240514-en
5 signatures
150 seconds
General
- Target ff5ab26128b5cbbc7e99ea77c471890be6bd4bdedf0d5f5da75b8b665281ac13.apk
- Size 3.5MB
- Sample240602-25wkjsbf59
- SHA256 ff5ab26128b5cbbc7e99ea77c471890be6bd4bdedf0d5f5da75b8b665281ac13
- MD5 4f0c145d907c19078376fb0097c74d0a
- SHA1 873a2084e84251a2a18adf828e3b4a84d8f2e067
- SHA512 f446a24a8a0215de469470eff72558cfdaf437033ec6ea378a6f50396098afd8c38ccd74e5a973853398a4409dda452d4be110d7ea8302666645b95e7fb091de
- SSDEEP 98304:H0JKGeg0qff908sW6EouowAAL6Ke/BDocLn/U:UKGPdsjJuowAA/eJHc
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.sbi.a1 - Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.sbi.a1 - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.sbi.a1 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.sbi.a1 - Reads the content of SMS inbox messages. 1 TTPs 1 IoCs
description ioc Process URI accessed for read content://sms/inbox com.sbi.a1 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.sbi.a1
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.sbi.a1/app_sslcache/icici-raju-n5-default-rtdb.firebaseio.com.443
- Size 8KB
- SHA256 c14857dd78c34ec2bfc7c54e255f88bf604b69b381794513b58d1e4650ba7247
- MD5 9c5e863d9d4383a8aa96a030c21fa50b
- SHA1 d861847edba9ddba36b779ab11c9c8f91b7a7485
- SHA512 9436411fb28410c6bc15e4463c042a83f02f971cdf8907fb024097dc40106fbf126c3499b844c85ee42810443f9916d87a6d8ce9d3599c30dd9b35f2057ce67c
- SSDEEP 192:l6Bgx4+ZlJDIyP+ayXQz6Bgx4+4lJDIy0+ayXQ:06pIW+N6+IB+
- MD5 SHA1 SHA512 SSDEEP