Analysis
- max time kernel
174s - max time network
134s - platform
android_x86 - resource
android-x86-arm-20240514-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system - submitted
02/06/2024, 22:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cfef439e4d4fd657e81e204c606044c8a787e8f2115feea7a3a7e4223e4d29f0.apk
Resource
android-x86-arm-20240514-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
cfef439e4d4fd657e81e204c606044c8a787e8f2115feea7a3a7e4223e4d29f0.apk
Resource
android-x64-20240514-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
cfef439e4d4fd657e81e204c606044c8a787e8f2115feea7a3a7e4223e4d29f0.apk
Resource
android-x64-arm64-20240514-en
5 signatures
150 seconds
General
- Target cfef439e4d4fd657e81e204c606044c8a787e8f2115feea7a3a7e4223e4d29f0.apk
- Size 3.9MB
- Sample240602-2l4rtahf81
- SHA256 cfef439e4d4fd657e81e204c606044c8a787e8f2115feea7a3a7e4223e4d29f0
- MD5 599c36f4477eb782845308cbbbd2cd7f
- SHA1 12c5decb1c10e65583e68d443f4098ec17880606
- SHA512 7538e40679e199be49a69c4d8cb5af462f8241b4123237f5257c14905859a1c6d818daf363ae8cdbf1b9177c5565a4e99296ab821a4c5a0dbe57330fda872530
- SSDEEP 98304:74pgPY2Y9pYQdx0FpMYsWW0wtkhst7Esr3+1:Mexgn0wOn
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo grocia_shop.in - Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo grocia_shop.in - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone grocia_shop.in - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver grocia_shop.in - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock grocia_shop.in - Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo grocia_shop.in
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/grocia_shop.in/databases/com.google.android.datatransport.events
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- MD5 SHA1 SHA512
- Path /data/data/grocia_shop.in/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 27abb573fe0f085ee0672197b9db46ccf0af7db1dbe2eadc2f5af1a554cc813a
- MD5 14624f73dabcb84dcc99a5b16c507557
- SHA1 6690a5a5d1648c8818caa49d69998ac987b20676
- SHA512 4650ef96d2e407f4c30f0c8fe73d5d8fa6676cb816448815b5c86cb39e7ffa5248c7d717cb9b7e48db99ec84c8fb4e9179b13a78df2a26dfba533a1b85acf64c
- MD5 SHA1 SHA512
- Path /data/data/grocia_shop.in/databases/com.google.android.datatransport.events-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/grocia_shop.in/databases/com.google.android.datatransport.events-wal
- Size 68KB
- SHA256 4b7abef609bd106e000682cefcc3459a7e696121657e2fdda58b2c1ad042eacd
- MD5 906c23b42f9e1b02395bd6517522a393
- SHA1 64878e23ffe77b42cafcc741bf9d4fbd3047d292
- SHA512 542c13b8b018420f233bfb5e1f3b4b9c067b843822e82df544b1334b17ecb2f1ebd89bac866dabae419e4b12cc6b44b7643224e2c71db62bbda8da9ca4cf5d13
- SSDEEP 48:CzNSP/n1g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSP/MgDJF:S0PGMEX0wIyNjaPk0
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/grocia_shop.in/files/PersistedInstallation422852896939125044tmp
- Size 90B
- SHA256 dc35aac96811c0cdf83c25ab06bd5d14b390c3c3f8af20d67b7935513dabaf41
- MD5 1d95ca37fb850211865a727567fd162f
- SHA1 bd5496c5430ec9b85bb1a34c5808fbf10bd6d07c
- SHA512 4edd4cef56335d98157ba7e194903834f13c5324aa1e0b3733e60084e31f2d3d20ee93db919f02ad42383b93c58bfcb7ba1047d4d981a0cbdd05afced3498052
- MD5 SHA1 SHA512
- Path /data/data/grocia_shop.in/files/PersistedInstallation8242415507014813393tmp
- Size 569B
- SHA256 5fb57720ec353709e66351246b159e6e3c764d7b1e14a3e363ca18b76578dab5
- MD5 52a136161a33600f9886cb4708891aae
- SHA1 41eb6110452f1633d0ab81dc42ed5a221b8924f8
- SHA512 5e2280d751cfa2fc9f7fb4f1e54dce6b048387f402537ffc95e534e2ec2a6ec09f99bb26f8def8b436138180b48e7449e883ce58dc22dd6523b1bccc962048c1
- MD5 SHA1 SHA512