Analysis
-
max time kernel
24s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system -
submitted
14-06-2024 00:33
Static task
static1
Behavioral task
behavioral1
Sample
3ce3c11a0013f24a1a828d2dba7c40b08d05f118de18b5a45863f64d10230393.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
3ce3c11a0013f24a1a828d2dba7c40b08d05f118de18b5a45863f64d10230393.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
3ce3c11a0013f24a1a828d2dba7c40b08d05f118de18b5a45863f64d10230393.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
3ce3c11a0013f24a1a828d2dba7c40b08d05f118de18b5a45863f64d10230393.apk
-
Size
2.6MB
-
MD5
352f708f951160dff8c913cfd9a60f8d
-
SHA1
2664829957b96603a0763c37d411c38b708f640b
-
SHA256
3ce3c11a0013f24a1a828d2dba7c40b08d05f118de18b5a45863f64d10230393
-
SHA512
6792413f301f7bd3c4be9129de63da904578291f0c482ad5e680d71f3ce82481b9c65a5269d52d44c3a9c8c19e17015ec0fdd0cc02a14f7fa2e5afd16ee4657d
-
SSDEEP
49152:4GJjI0iNNpX8iI2Fv9KE4HeyL/lgn1DS643pkg8/Qzfr0hl8X:bIZZFvi+Qgn1DSHzfr0h6
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
com.perl.gqmdescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.perl.gqm -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
com.perl.gqmdescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.perl.gqm -
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.perl.gqm/app_outdex/libdexprotector.4268.soFilesize
369KB
MD5bf2c17d31f7d5442d6eeb42c5cef70ca
SHA12d604420aeba294bd44ad9d55076fa44959f120c
SHA256b7351759655f61067adc9d73af8ba83b7adee0d730eb617597747e926020201e
SHA5129eb00f26d770d8407790eff9f29665b2ed0b9bb77e1de3354a7f1ec30482b92f30ae94046edc194fe625b7c99ecca066fc0cec4833753cdce8638de419906403
-
Anonymous-DexFile@0xf36fe000-0xf36fe12cFilesize
300B
MD57c80da100acf95df2c9629e515898a6b
SHA128c7d9a00126bc12a0760f9cc6270abea6866d73
SHA256ed26ed598d0393b52cb68fd71e26f7eb5fba998f72c1c30eae4622bb0752692f
SHA512b2eb8340ae3dd3ddbe2a5cf3de6b735a33bb15b51b728f01643fed02375c8962f37fcbd4827fd578cb73678847cc47c45290d763281be5caeded67fa8923c6a2