51d8b56a44c625e4dbd2b5627249535d5b9cef300f189958c2f9a7116d25f884

Analysis

max time kernel
7s
max time network
179s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
03/06/2024, 10:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
alipay_plugin_20140529msp.apk
Size 3.6MB
Sample240603-mf68esce27
SHA256 ff2772cd4f8fb2eebd1939761823056e0ea2e5782b6985dce5027a6db7679961
MD5 23c9a6e9e4d9800e783923e0a9ae4d00
SHA1 ce6628104ee862539be81f4398d8c96e46d7c3ba
SHA512 ac5a4047b71c68f194d8171e093598681e2ab6bb730a9fd900eea5413ce64e31da3f1cd2c4f2fe97f86515e5b27168a9fbffe014805107f545acfd947c5cc620
SSDEEP 49152:kMPr/CPIFZlICKAr3RP6FcZfTcyTICKNz28PYoZrr1OYXugY:97d6UrOy8PJ9Ob9
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.alipay.android.client.pad

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.alipay.android.client.pad

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.alipay.android.client.pad
1⤵
- Checks memory information
- Checks if the internet connection is available
PID:4503

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

RecentDB

Path /data/user/0/com.alipay.android.client.pad/databases/RecentDB
Size 20KB
SHA256 9ea542501e0254e19aba785b5e497c48b7bc20c0465ccc818a6b692cd9ccbe66
MD5 e654185c3d384ba6082958fd73a7188d
SHA1 149216c5b36cb433c4627fc99979f7ffea7f40e6
SHA512 581a2df7d61c976ffae683bfdecac6adf7eeb30a53c1f09b2681157ae2e65a92e4ef1e84cde5de791dfdc13f08d7537572ddc785c5c1bf51cee7c5fc130629cb
SSDEEP 12:TLZqd0yNTSFbyuqRfxFMBYxgdV94uRmBEyPbAVOwG:TLwdh4qfx+BYxIqVGSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

RecentDB-journal

Path /data/user/0/com.alipay.android.client.pad/databases/RecentDB-journal
Size 512B
SHA256 8a2ee6406581ab8de2a6e87b20e0fa509173e0166e5faa783546d959cbbdc658
MD5 9e3cd2134c66dc7093da8c75efe8c91f
SHA1 2c802b0bea44b0393bfaf43a8a546e2eb23c56f3
SHA512 6264dd9de5aa6b225c9541954de964e532a96e48326627fcbb3899fe61feb78c9e25244858210fd67e773872cd1dc93a5f89b415a709a9d94315892e9b6ad1ff
MD5 SHA1 SHA512

Submit Download

RecentDB-journal

Path /data/user/0/com.alipay.android.client.pad/databases/RecentDB-journal
Size 8KB
SHA256 dc8f56df2b4bffe6ae8c971bde70ac62e6e2a7ef1d6cc8d2690e19f7121b0498
MD5 fa85af939e1f4fd6a7bafb6e99b9d833
SHA1 d3d4df13335475126ea8220a051d84a386afb559
SHA512 aeefccdbe462b566d00cb2e260cea1918969690506603db81c514e3028853458a044fafe3a1c91b1c88796766494801f76a57b4d93aaab452347152abd15de76
SSDEEP 6:7+/l9/On13Rg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKK:7+tdSRqLiuWdYRmBEyPbV
MD5 SHA1 SHA512 SSDEEP

Submit Download

RecentDB-journal

Path /data/user/0/com.alipay.android.client.pad/databases/RecentDB-journal
Size 8KB
SHA256 da16c79a033a7ea31105272f0926f6da8286be166dd3fa2f96641f8d5f2a8601
MD5 f1b404b79cf20904e3df5a26e5f4f560
SHA1 17765fec69d4d1762fb4e0d1d5a7e0a0806372ca
SHA512 bac439bd13383299fb1bc62348240fa4c03dbc42749a4cb6b0c71ce9a299e6ba4c7562cabbad557a7d012563918ef74ddd86686dc9af863dd7b98f5b2fed95af
SSDEEP 6:7+/l9tgPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK2d9M/M6:7+tQqLJdeWRmBEyPbHs7
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads