a49331e419c70643364f3f6419ca171b91dbd2b7a8d4023fae620ff8d09fa2fd

Analysis

max time kernel
179s
max time network
179s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
14-06-2024 07:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

stasdk_core.apk
Size

2.1MB
MD5

7219500f857b0c418b074759ba44301e
SHA1

07f557bc3d839260caf921852618ac762fef262d
SHA256

d8c32e40ba04065dd62cae8495eb47d1c251a6bc830778f80eb06ae07f04563f
SHA512

6086cfbeb32e3ded98d89c0f0bc01fac10e6036874e1c8e0ecb41864e62b00df5a32f9a3aa7bf126f6b8f1393db48abaf94ce528cf0686a3946b139bc50c8a68
SSDEEP

49152:CzrcZzVCuS4++IpMKWnL0qRIZvwukk/icrtb+OPpGF:CzGzoB+I+dnL1RIOu9icyF

Score

7^/10

collection discovery evasion persistence

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
discovery

T1424

Processes:

com.dbgj.stacore

description ioc process

Framework service call android.app.IActivityManager.getRunningAppProcesses com.dbgj.stacore
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
discovery

T1421

Processes:

com.dbgj.stacore

description ioc process

Framework service call android.net.wifi.IWifiManager.getScanResults com.dbgj.stacore

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.dbgj.stacore

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.dbgj.stacore

Requests cell location 2 TTPs 2 IoCs

Uses Android APIs to to get current cell location.

collection discovery evasion

T1430

T1627.001

Processes:

com.dbgj.stacore

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.dbgj.stacore
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.dbgj.stacore

Queries information about active data network 1 TTPs 1 IoCs
discovery

T1421

Processes:

com.dbgj.stacore

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.dbgj.stacore
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

T1421

Processes:

com.dbgj.stacore

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.dbgj.stacore
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

T1624.001

Processes:

com.dbgj.stacore

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.dbgj.stacore

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.dbgj.stacore

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.dbgj.stacore

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.dbgj.stacore

com.dbgj.stacore
1⤵
- Queries information about running processes on the device
- Queries information about the current nearby Wi-Fi networks
- Requests cell location
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4263

getprop ro.board.platform
2⤵
PID:4334

getprop ro.mediatek.platform
2⤵
PID:4354

getprop ro.board.platform
2⤵
PID:4377

getprop ro.mediatek.platform
2⤵
PID:4396

getprop ro.board.platform
2⤵
PID:4615

getprop ro.mediatek.platform
2⤵
PID:4635

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.dbgj.stacore/app_baidu_ad_sdk/__xadsdk__remote__final__builtin__.jar
Filesize
79KB

MD5
ce26fbf803de3bfe168e668ef8a9a39d

SHA1
2620f24b0c7a6975a441bd6dfc1cd97982f38b63

SHA256
3d7ba159f3625590a4d399e83ff8c15b30713bb7ecbd75fe1f8889459cbaeecd

SHA512
21e0e428f63fda518f2f455d2d19076329c0682998bd5c9d349a28aeee7d097283ff21cd627818551ad5287d6cbf069ce76fdd588b1c1a6a965c7ca23653a08d

Download Submit
/data/data/com.dbgj.stacore/app_baidu_ad_sdk/__xadsdk__remote__final__builtin__.jar
Filesize
85KB

MD5
3c850ffec5bdd850f123077ca210a411

SHA1
1c1ae4678b8a3b65640f047cb1bd72bc70d66f97

SHA256
516023ce55fff40074d3c3d9016c023b1fc7dfba2b59c172f89141f1484d418e

SHA512
aa3611687b6140ee9214392a84bc1ef55a6425a84a4e413dfcb2e936a931b9015e1e4ec53ad73539d26622427f9e6da0eae5c58ffc18285de42fc15639d786dd

Download Submit
/storage/emulated/0/data/.systemid
Filesize
36B

MD5
459a35e9159dd85e9e1aabeec874830e

SHA1
ff98ddcd8c980d2aff154984ec04b4e5c9aa8a76

SHA256
5edac547d56b18ddb2a4e4d6d8f368cea35f6793add71af3381a3894df32e3ec

SHA512
ef93f81e206e6fcb9583a6ed0153fe546e1cb10624b80495edec0ac247c286631efae42f0aa1bd9476b05e8c86e217894bd6ee46a91e8dec33925f897d7c34df

Download Submit
/storage/emulated/0/data/.systemmac
Filesize
17B

MD5
0f607264fc6318a92b9e13c65db7cd3c

SHA1
c1976429369bfe063ed8b3409db7c7e7d87196d9

SHA256
c248c629af1fe0a8c46b95668064c1d2952a9e91d207bc0cc3c5d584c2f7553a

SHA512
9dbd40b135b46c7be31b8c7d11c75b0b179af3a6550fca52ec447583aeb50aaaedb4b1e9373cf8826615149549a2efaee04efdc9a282e3a6b387c73099c13fb1

Download Submit