Analysis
-
max time kernel
47s -
max time network
160s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
-
submitted
14-06-2024 00:22
General
-
Target
681746480927bb0ea963274be95e56ffc5f56aa447003394b40bd9f2f094599c.apk
-
Size
3.2MB
-
MD5
5980eb10e48de34b102deff85d574be0
-
SHA1
611f659aaf6cc2ae139ca857b8a80e4a118aa0cc
-
SHA256
681746480927bb0ea963274be95e56ffc5f56aa447003394b40bd9f2f094599c
-
SHA512
c1ae0a18f674fc2d3c802d3224ccfaaba65b40596107e4b1b098a47be99ba8ecb070ecf03d1202880a5d2eaf9b00b88836e2b33b6e5043b8257d7e1318c3a7c2
-
SSDEEP
98304:yWJECs296ETOp2VgUk3XH2ZQvUzfrivHlA:yW6Cs2IwUkkHH08W
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.perl.gqm1⤵
- Loads dropped Dex/Jar
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.perl.gqm/app_outdex/libdexprotector.4323.soFilesize
369KB
MD5a77ba346138d6026cbdda83ed6d10ee8
SHA1cc2c6dbecf56939d2341520b0285cecdf4ccd470
SHA256858a45600b5b633682d05d8dfe25479cab5d2b3cfe66e6ffde3f874d2fa8ca3e
SHA512452aaace6bffda4c4099c037f2e1dabccb21cfe7138ee96482e4bafe55fc56504aa66028f0ccc30d980ffedeff1671207d11bbfc3bed32ed0e18ce8ffdf69a2c
-
Anonymous-DexFile@0xee4a4000-0xee4a412cFilesize
300B
MD57c80da100acf95df2c9629e515898a6b
SHA128c7d9a00126bc12a0760f9cc6270abea6866d73
SHA256ed26ed598d0393b52cb68fd71e26f7eb5fba998f72c1c30eae4622bb0752692f
SHA512b2eb8340ae3dd3ddbe2a5cf3de6b735a33bb15b51b728f01643fed02375c8962f37fcbd4827fd578cb73678847cc47c45290d763281be5caeded67fa8923c6a2