Analysis

  • max time kernel
    12s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    14-06-2024 00:41

General

  • Target

    12341f38f24cb7f52bd014fc862de8fa0c25ffcbbec4dfb766f02a2d51a23276.apk

  • Size

    3.5MB

  • MD5

    acb30cb23351ace7538092596d750f96

  • SHA1

    7f349be4745ad452e22b214b9c6809af589e9e13

  • SHA256

    12341f38f24cb7f52bd014fc862de8fa0c25ffcbbec4dfb766f02a2d51a23276

  • SHA512

    bf038048a7e2bff06b3cf20c919c41575589c3738ec43ddb6beb0154b94556b01f33b7a435e65e87a63440ee6c9140e753470fe5aa8f7f0a5eaf409449730184

  • SSDEEP

    98304:hKYnHnxpmmN1a8TsRIZgodxo89hAd9Dzfrbb4z:QkpmmN11jDn9h+u

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • com.perl.gqm
    1⤵
    • Loads dropped Dex/Jar
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4272

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.perl.gqm/app_outdex/libdexprotector.4272.so
    Filesize

    369KB

    MD5

    c2c87b613473eca3f1bb326825b82f98

    SHA1

    10dfb481ec832b2ea28bd06d67209c0fb1fc1f54

    SHA256

    6fc0d0a917333e8c25b4f52edb33bba9548a71ac94f623418d1010898298a2d4

    SHA512

    02e2d612a7258ed915d6f5b197ceefcba132ed0eec045206394f3fa59de4633e72b1b203429d0320b4163d4b35e7740d365cac323d7869644d394063b205ab8c

  • Anonymous-DexFile@0xeea79000-0xeea7912c
    Filesize

    300B

    MD5

    7c80da100acf95df2c9629e515898a6b

    SHA1

    28c7d9a00126bc12a0760f9cc6270abea6866d73

    SHA256

    ed26ed598d0393b52cb68fd71e26f7eb5fba998f72c1c30eae4622bb0752692f

    SHA512

    b2eb8340ae3dd3ddbe2a5cf3de6b735a33bb15b51b728f01643fed02375c8962f37fcbd4827fd578cb73678847cc47c45290d763281be5caeded67fa8923c6a2