Resubmissions

09-06-2024 15:45

240609-s7g1hacg63 7

09-06-2024 15:29

240609-sxcysscf37 7

Analysis

  • max time kernel
    319s
  • max time network
    1222s
  • platform
    android_x86
  • resource
    android-x86-arm-20240603-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
  • submitted
    09-06-2024 15:45

General

  • Target

    Hamster Cоmbot Bывод.apk

  • Size

    7.4MB

  • MD5

    43cd0d0837b2cf2371e93e4340614562

  • SHA1

    db8cd87819a91f311f22a78e1e4099486768099d

  • SHA256

    608bccf44f236542d708efc9e8d81372bb1a941969f267b315772acd370d2b06

  • SHA512

    7e5356ef27b70b99a872b3c5cf8e21358971c0c85c34c7fbab6a8a20a70a5859a34dc8c651e274fd3a13bcb3af6f7adfc2269b108f11bbb25eb4257ac5f9a0f9

  • SSDEEP

    196608:xwzajoJT+62TZF8SoGwsX7LwwYwwxfn8/XezdJsy7BwHxz5:4aKfsf1oRjzqXeJSyK

Malware Config

Signatures

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Requests changing the default SMS application. 2 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.example.application
    1⤵
    • Queries the mobile country code (MCC)
    • Requests changing the default SMS application.
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks memory information
    PID:4217

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.example.application/files/profileInstalled
    Filesize

    24B

    MD5

    93656f875907e1c5f2bd440c6a013001

    SHA1

    c192a245309f98c8c6cc0cd3b09462cbea202587

    SHA256

    74d423d160a5d3d375626c94de5da5f5555d6fd57b85bedc305f3b2959844a30

    SHA512

    be71d3b0b780393057f5ac47608f91a627798b9e21ed932d4be60282b5c323bde609b273075a60c4e7e67786e5b4676cf70539cbbc03ef790c9debad7a6a8953

  • /data/data/com.example.application/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
    Filesize

    8B

    MD5

    9dbfdbe41ac7335d680cfa66760ac2ba

    SHA1

    4b8fde52ba85f00515cd799041376ac30c2841ed

    SHA256

    eac890424e26427daba9fa22f3648a62fda6abc23ce76ab34f906012f029fae8

    SHA512

    60319003bd9a2e64ce76afa6a871e5a7d94d5979935a62ea7b74693d01c6cbe577deceb729747f376715c8f37f16b34a5a72ad86b3f2894af55ba9a435683c91

  • /data/misc/profiles/cur/0/com.example.application/primary.prof
    Filesize

    5KB

    MD5

    b6d3ca5f8b1bea3f243673abdcbc25f4

    SHA1

    917a67c3b5fd9814adc01e81c59ed08c70db70ac

    SHA256

    1eadd2d3de1286832ab2ff6ee7eaba4fc116b53981008593219e9afe543cc9df

    SHA512

    03bbd5bff2f967445e1f62da8570063f2aae822c3f0bfc67a42d7d0afc893ba5394e3d5d525dcd7c4569fe0f0e9a904b0fe5044c138a2427c46879bd7ae6a4e7

  • /data/misc/profiles/cur/0/com.example.application/primary.prof
    Filesize

    2KB

    MD5

    df0812d3979b481a070c881f225f4bba

    SHA1

    bd537237147d3d475a5b79d31b476555d353b791

    SHA256

    0e0a41f9d63e6b021f2f211a09b0f23e3852e233902eabdb82dd83d34941297c

    SHA512

    4e35c07adefbd7f7ed469cb6a316f6bbe870f53f63657aa3f425765c87dd9c752a58faa38a029f792c9601c2e37d7f2fc21d1fcd3bc664391f68b992ae9d2b47