f64e3527dd7a9fe72687fdb7b191ac55e21404a10a7823adf88558756f6261c8

Analysis

max time kernel
3s
max time network
160s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
03/06/2024, 09:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
launcher3.apk
Size 4.0MB
Sample240603-lcq7csaa4y
SHA256 89989a05630ecc7bd7be28ed77f9cbfd1c74a5612aa7c4470bf1e977132afb80
MD5 9e164feeb01f6420fec87e069e42326a
SHA1 ccddcfc2ff287855bee059c0a591f4ce6bb6a4b0
SHA512 6bf5021114a47fc59e89dfcb19b5c07a2e195c90962a2d8a30891d7369251cc25dedfb13b0dbe1b480e6f649620fdad91cb956357330ada59d1e771adcc1015c
SSDEEP 98304:e9azSX1djQ2vZdvZirT2JNqGqe8ewMbBpiX4IOJLk:e7f7xVW2JUG9KMqX4IOG
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery persistence

Malware Config

Signatures

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.baoruan.launcher2

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.baoruan.launcher2

com.baoruan.launcher2
1⤵
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4273

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

launcher2.db

Path /data/data/com.baoruan.launcher2/databases/launcher2.db
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

launcher2.db-journal

Path /data/data/com.baoruan.launcher2/databases/launcher2.db-journal
Size 512B
SHA256 432035a362089830bd8115edd868294d458062002a564704cfebe51f873b8fde
MD5 ee9106d5e78747b41f5307bb54d3faa0
SHA1 bacd6eecd80e204b76ee8ff7837a2e2492717d8f
SHA512 496cf4e7e54b167d4a7df824b7ed56371126a7c995aa7b31c33d51a89cf944028228dc45d2c732ea9494ba69cc4598c01e419e89ee5b64dcc314f280bcf5bf16
MD5 SHA1 SHA512

Submit Download

launcher2.db-shm

Path /data/data/com.baoruan.launcher2/databases/launcher2.db-shm
Size 28KB
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

launcher2.db-wal

Path /data/data/com.baoruan.launcher2/databases/launcher2.db-wal
Size 48KB
SHA256 bfda9cae76d1b9807af7925553229663a0c4e0f854d2f13d848e81b1e8f66c74
MD5 2ac4dcbdffc18ed388c3bc0a3a0a2ec2
SHA1 ca4f43750cde7665a968db9bd4a82d40978e7d82
SHA512 c02c930606c0cb63157750e6c598c16d85eb80195211eaf329e619f6c698d91e5bad616eb4535146690f925f12e16580adeed29bb8115f55051df18fc1159088
SSDEEP 48:XszNSP/fM230OtVBB3lqV2rJtcBBjVj5FW7qV9t8EJdqVASP/Ku:XU0P73HV/Vc/H1xCPCu
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads