Analysis

  • max time kernel
    24s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    14-06-2024 00:33

General

  • Target

    3ce3c11a0013f24a1a828d2dba7c40b08d05f118de18b5a45863f64d10230393.apk

  • Size

    2.6MB

  • MD5

    352f708f951160dff8c913cfd9a60f8d

  • SHA1

    2664829957b96603a0763c37d411c38b708f640b

  • SHA256

    3ce3c11a0013f24a1a828d2dba7c40b08d05f118de18b5a45863f64d10230393

  • SHA512

    6792413f301f7bd3c4be9129de63da904578291f0c482ad5e680d71f3ce82481b9c65a5269d52d44c3a9c8c19e17015ec0fdd0cc02a14f7fa2e5afd16ee4657d

  • SSDEEP

    49152:4GJjI0iNNpX8iI2Fv9KE4HeyL/lgn1DS643pkg8/Qzfr0hl8X:bIZZFvi+Qgn1DSHzfr0h6

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.perl.gqm
    1⤵
    • Loads dropped Dex/Jar
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:4268

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.perl.gqm/app_outdex/libdexprotector.4268.so
    Filesize

    369KB

    MD5

    bf2c17d31f7d5442d6eeb42c5cef70ca

    SHA1

    2d604420aeba294bd44ad9d55076fa44959f120c

    SHA256

    b7351759655f61067adc9d73af8ba83b7adee0d730eb617597747e926020201e

    SHA512

    9eb00f26d770d8407790eff9f29665b2ed0b9bb77e1de3354a7f1ec30482b92f30ae94046edc194fe625b7c99ecca066fc0cec4833753cdce8638de419906403

  • Anonymous-DexFile@0xf36fe000-0xf36fe12c
    Filesize

    300B

    MD5

    7c80da100acf95df2c9629e515898a6b

    SHA1

    28c7d9a00126bc12a0760f9cc6270abea6866d73

    SHA256

    ed26ed598d0393b52cb68fd71e26f7eb5fba998f72c1c30eae4622bb0752692f

    SHA512

    b2eb8340ae3dd3ddbe2a5cf3de6b735a33bb15b51b728f01643fed02375c8962f37fcbd4827fd578cb73678847cc47c45290d763281be5caeded67fa8923c6a2