Analysis
-
max time kernel
47s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system -
submitted
12-06-2024 13:31
Static task
static1
Behavioral task
behavioral1
Sample
7ed35ae9886107e71cafc427c5ec6dcbcd40c78e8a538c02697b538291fe5b13.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
7ed35ae9886107e71cafc427c5ec6dcbcd40c78e8a538c02697b538291fe5b13.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
7ed35ae9886107e71cafc427c5ec6dcbcd40c78e8a538c02697b538291fe5b13.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
7ed35ae9886107e71cafc427c5ec6dcbcd40c78e8a538c02697b538291fe5b13.apk
-
Size
3.1MB
-
MD5
fd5c5b123eacbd5a0c56a2d5f7104b72
-
SHA1
2af5899addcadb218a6934f4bee7dedda2457614
-
SHA256
7ed35ae9886107e71cafc427c5ec6dcbcd40c78e8a538c02697b538291fe5b13
-
SHA512
4a82fd06b092decf49b0e244a7d3195413aad29c85733fcbb0466fa34e150b6c6dd8fac54586ae72c9eb1c94a420153c348ce141cd086a07d94e36949e266a1e
-
SSDEEP
49152:IApp8WW9EDE1CVBgd27fC06+umfjPyrFzkn4kZjfgKnHpJgI3lhOrNH/4S:IOp8N9EDEcsrf+tfjEfkZMKnvlhOrNHv
Malware Config
Signatures
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
yes.debug.yesbnakdescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone yes.debug.yesbnak -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
yes.debug.yesbnakdescription ioc process Framework service call android.app.IActivityManager.registerReceiver yes.debug.yesbnak -
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/yes.debug.yesbnak/files/profileInstalledFilesize
24B
MD5c155643bf8eb382e7fa14b5ab2724958
SHA1343e1c5fd465f76f8139734794e89a09c87583bc
SHA256d10b803c88b966b73684f31cc154bdc77d9c72e01880b829df74a351f57ab5f8
SHA51225ccde51324ed45ecb762d5a3cf212b7b73ceff0be235c74348bb68df36f04073937fc2015d97f022d46a044a9ec4cfb4ab2dfabeda093113e7391ce8e890740
-
/data/data/yes.debug.yesbnak/files/profileinstaller_profileWrittenFor_lastUpdateTime.datFilesize
8B
MD59da7665c17e609d5aab36365e4b1f80f
SHA14358908a409b292ca63171926c1a8a9742e66149
SHA2568940abd0e56434bf2d7ecf943a5b1f6d2aab4c903ee4da93f68e4b6001eff0ee
SHA51249e3bf33c56c6f9b0d9c3fb0ca82ea1bb71aec894c3ab5c51cfa737c23bf63736498467bafbd35c52720cf638f9e9a3fff0d602e736474136a996ea4906e7091
-
/data/misc/profiles/cur/0/yes.debug.yesbnak/primary.profFilesize
1KB
MD5fc68691110701a09ae3316b71e9aba4b
SHA182ef2be098b162e898f77b28e70eb35dc61aa07e
SHA2565fbfc3aca9fb54f9bc698a75b023196055d7d0d6c1454aa517b2360bb58a1043
SHA51212b947635178386ad8c8ffae0b16a3af7b9be6f5645c8f07275083c1c4398fd0e37990012c51f01be07caf8341889bc4b3f988d2e0da6866ae1788698581b10f
-
/data/misc/profiles/cur/0/yes.debug.yesbnak/primary.profFilesize
3KB
MD5ae003b6b6afc483d317698afefe50fa8
SHA1ab0b5c6cd9176cb855c57f334af55879aa84b3c7
SHA2567398667add273e8e3382fb5306366dfa8c2a75fdc89883e5c44a1a811fa999d7
SHA5129e831e5e5d937182dfa2aa9885157c1a365e47f555c4d1d72fa5be7b580fc44ad11309d589d195029ffe30a2892736323fcbdd37db3404ec8e1afcf37c9f7f3e