Analysis
- max time kernel
47s - max time network
131s - platform
android_x86 - resource
android-x86-arm-20240603-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system - submitted
04/06/2024, 12:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Stanbic IBTC Events-v11.0.6-appsonwindows.com.apk
Resource
android-x86-arm-20240603-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Stanbic IBTC Events-v11.0.6-appsonwindows.com.apk
Resource
android-x64-20240603-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
Stanbic IBTC Events-v11.0.6-appsonwindows.com.apk
Resource
android-x64-arm64-20240603-en
8 signatures
150 seconds
General
- Target Stanbic IBTC Events-v11.0.6-appsonwindows.com.apk
- Size 14.1MB
- Sample240604-pn4tdage39
- SHA256 1cfbce677f2b28f0135e9270a676fa30d930872b3a974be7481d566e6f2e52b2
- MD5 92c1cddef1187865a04b2b500d35f0c6
- SHA1 91dea787574cdd06d05a82a65fc7d28b953a3fe1
- SHA512 b4a45e472958ec88398e7c12ce0e3e0c39dad59730b135f1f005b301252470dad481ebbecd123c62afa0b526f9eb2fa47aa83f9e628cc02e7de4be253aa22adc
- SSDEEP 393216:YJG3Z68hFGSCfgvQ8G4uR7LOY/Dsl3klwT9tWL4B:/3Z68hu4vQt6QwTX
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo com.reinsys.apps.conferencing.stanbic - Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo com.reinsys.apps.conferencing.stanbic - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.reinsys.apps.conferencing.stanbic - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.reinsys.apps.conferencing.stanbic - Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.reinsys.apps.conferencing.stanbic - Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.reinsys.apps.conferencing.stanbic/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- MD5 SHA1 SHA512
- Path /data/data/com.reinsys.apps.conferencing.stanbic/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 1af7d50bf65c925634be3da1b5eca1f4c5fa3bdc01675cbb421696f07c76a20d
- MD5 f3868c47c39fd427cdc56267799dca7e
- SHA1 3621f57bc18a99b756987a78a9a7b7a8a1845ec6
- SHA512 148d846b571c6ab7e004bec4c81f272f9f8c6e6786090e2ccee07155982cb6de5c4bd34f59fa3b94ecc514b1dfede6a75bdf46885dec90b1b8f2d9c46de9e173
- MD5 SHA1 SHA512
- Path /data/data/com.reinsys.apps.conferencing.stanbic/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.reinsys.apps.conferencing.stanbic/no_backup/androidx.work.workdb-wal
- Size 16KB
- SHA256 b1ad2c088aeb89fd335560750568c3a881e760a308445b27e8030fd8382e7558
- MD5 71c4746987c758053fccc46d841f67aa
- SHA1 7e45f01fbd34cf9be41cddd5d3c4caf045cccd75
- SHA512 0a5084a23a20cea016c363345014511cfb65ecb14289b7791bf29e3c2a9ec26db398c0afb241af7cda12c8402a6f1d2d795645ca9701f4a77bdce06b4fe8a4a2
- SSDEEP 6:Kykl7+baYl9FZdrlOERX4PBX4ogLugMBX4suuK+/FZHGZ4U/+Ow2:Kyi7+2YTzdTRmBEyPbP/FgaU/+Ow2
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.reinsys.apps.conferencing.stanbic/no_backup/androidx.work.workdb-wal
- Size 108KB
- SHA256 92e369ed4e693faf63f3f192dffc305ba16cc20d1469017fcaa3638db5f1d334
- MD5 246e8aa6679f06643c1b0c2f378a69a2
- SHA1 4637d95d8e407bed9c03875260dcacb9493308b8
- SHA512 262c4d8983b42392f983db66a03e6f409e537d99c55873b2e62956c62e57968db017b882b5613a0fd51661bde2b54e7c4268f79ab6186e57b587af191edda943
- SSDEEP 48:/9Y66M/31pp8aEKeWrFhVtD/ymmumWAhrBlOymdGWOWKuWov6xl73JcXSMmchI9c:t6+hdjnHtDRMpf8UzS6+BD8q0ExPtj
- MD5 SHA1 SHA512 SSDEEP