Analysis
-
max time kernel
151s -
max time network
139s -
platform
android_x86 -
resource
android-x86-arm-20240603-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system -
submitted
05/06/2024, 07:26
Static task
static1
Behavioral task
behavioral1
Sample
皮肤商城.apk
Resource
android-x86-arm-20240603-en
General
-
Target
皮肤商城.apk
-
Size
1.8MB
-
MD5
61daa19b8769d2435bc84c694e17113d
-
SHA1
78bc1ed637f2377c60b1ddf8aed6fd8ffc6c8b80
-
SHA256
539f098606ff4c9ca3daac26e24bba5aa7db8b45e1d31f2b446af30af97b6c16
-
SHA512
c0d446f8c71326ab443dcacef1789a72af0cbda975119504de3b8d75034d5ed85dd81592c1940937178d2e8658c586a003e7fd8aa38570da7c5c345fb3e3681d
-
SSDEEP
49152:kmw4jV8q5QIH8ySPxsBfgRLKi0W6zUmGA:vjV0vPxsOJgQa
Malware Config
Signatures
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.mobile.myapp -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.mobile.myapp -
Requests accessing notifications (often used to intercept notifications before users become aware). 1 TTPs 1 IoCs
description ioc Process Intent action android.settings.ACTION_NOTIFICATION_LISTENER_SETTINGS com.mobile.myapp -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.mobile.myapp -
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.mobile.myapp -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.mobile.myapp
Processes
-
com.mobile.myapp1⤵
- Queries information about running processes on the device
- Queries the mobile country code (MCC)
- Requests accessing notifications (often used to intercept notifications before users become aware).
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4249
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2KB
MD55e63b162709aa4b7d63e21e474565d42
SHA13b7a655b680c5ead2625bbad47b8758c925ea2ca
SHA256576b11d1946d8a213f5ceeef22290b7e20598ee37e8020c613d57e65e17f7d42
SHA5124d61267022248f71b6e9d22f1b637da962dfaf3dbc1ecdcb94e6f96b93c9752006e0c2586340388284e8b212647b87469f5db5f02e5d19c013f25d4591eb44c0