Analysis

  • max time kernel
    3s
  • max time network
    141s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    13-06-2024 04:03

General

  • Target

    alipay_plugin.apk

  • Size

    354KB

  • MD5

    370e3ce20f4f363c993599c8702f21b7

  • SHA1

    5cc5e92fa2347aab04c145954cec76b1cfd15c37

  • SHA256

    1b6b376b638eb17b718f45b92005f20e78d27687b831b13b1aaad1bdb05daf1e

  • SHA512

    50c5702f2a4398aae9ab5b376d5f420cebb20c07030a4efc70b8e45934d7a93803b74f41c1c0bf48e9c08c1c43b9ec247c60190b55db52afc095d4703fac5912

  • SSDEEP

    6144:l26IZ1oqBjGVN8TdW4zxgnm1Us3JuOK2Ef5C8EcPK+WvyQcQ2fnFByVW:l2vpBiVN8pWggmlYL5CLE8RcQ2fnGo

Malware Config

Signatures

  • Requests cell location 2 TTPs 1 IoCs

    Uses Android APIs to to get current cell location.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

Processes

  • com.alipay.android.app
    1⤵
    • Requests cell location
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    PID:4197

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads