ba8f0890c4c7f9952a2827aebedf4e586d0bd97ef85f1c0f880a564786da5292

Analysis

max time kernel
12s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240603-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
submitted
11-06-2024 08:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ba8f0890c4c7f9952a2827aebedf4e586d0bd97ef85f1c0f880a564786da5292.apk
Size

971KB
MD5

2b6d6a1538f64fe98d941df9813617de
SHA1

5b7047eb04cfb1282e34f5eb15a9723183bbdc50
SHA256

ba8f0890c4c7f9952a2827aebedf4e586d0bd97ef85f1c0f880a564786da5292
SHA512

c6c3a282004cede7b6b0c14d704260400d7567d6366f71a3ee48a78b339f05442490280b78e9b65e62d3acfdde60e22e1862607d99722f6c695c7d030c0a1dc7
SSDEEP

12288:tOSuOIM00sMRmhiRxkBMSlrA0OnduIQVM1dV89wNAkASwVp3dGJxcl9gA4qDiyfj:kSS0/mh1BMws1n0WVkW6zGj49g/Zyfd1

Score

6^/10

discovery evasion impact persistence

Malware Config

Signatures

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.jitidulayuxeba.vuve

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.jitidulayuxeba.vuve

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.jitidulayuxeba.vuve

com.jitidulayuxeba.vuve
1⤵
- Makes use of the framework's foreground persistence service
- Queries the mobile country code (MCC)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4247

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Foreground Persistence

T1541

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads