e27fa21948dc8ae84fd454dec0d75de57a7e9875a5b39fd43d6aad4c75902630

Analysis

max time kernel
7s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240603-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
submitted
04/06/2024, 20:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
com.qihoo360.mobilesafe.recommend.apk
Size 3.4MB
Sample240604-yzfqcsag47
SHA256 69b3baaa23f0dfa4a27edb57f04865b38c7ae83a8c63740109488ff6ce0ca90b
MD5 0a2f057148b0746c4a8a64f170bc0bae
SHA1 aa62a02529ddb89e7e07faddddd615674f702f48
SHA512 ddc79a94ddb505aee170efb511d4f0b0b2d35fa72e801e608c78c23807a3040ccbb37c2c498905ba96f3742d7b3de88767d981ef373b32513ef6c9054433e392
SSDEEP 98304:/9InT8ySMtRbS2hz0yrsTdbRxijl7hQBj:+Unkp+dxuh+Bj
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection discovery evasion

Malware Config

Signatures

Requests cell location 2 TTPs 1 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

Location Tracking

T1430

Geofencing

T1627.001

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.qihoo360.mobilesafe.recommend

com.qihoo360.mobilesafe.recommend
1⤵
- Requests cell location
PID:4564

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Execution Guardrails

T1627

Geofencing

T1627.001

Credential Access

Discovery

Location Tracking

T1430

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads