Resubmissions

15-06-2024 08:24

240615-kapp3steqc 7

15-06-2024 08:16

240615-j6he7stdnc 7

Analysis

  • max time kernel
    26s
  • max time network
    149s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    15-06-2024 08:24

General

  • Target

    unionbank statement.apk

  • Size

    3.1MB

  • MD5

    45c4640277c56d2d89649f194db8e3b9

  • SHA1

    9978bd527dab1e32d2d3a66f1a6296ce5d8273fb

  • SHA256

    933e823fcac69434b507369868aac534cd097d8d4b2d2fb20c0f2937c9ffd5e8

  • SHA512

    cca69c63a7e8db3e256cfeeb9715ea405c14371c648cd350ffd1b7a7a08910743138577e361a4b324afc31c85c88012d29a5bf48c0089a331cbac5e1802e29f9

  • SSDEEP

    49152:PpBlLgVq2K+eYhrMqCAjlgYfEgI7ESYD1r7wxqCDNr0z8gXVhhrEs:hvL52HtYqCM+n7ESY17kMhhrN

Malware Config

Signatures

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.smsreceiver.dhruv2
    1⤵
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:4235

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.smsreceiver.dhruv2/files/profileInstalled
    Filesize

    24B

    MD5

    e8872f1fdde8018891368f4c9ae2d9f8

    SHA1

    6efc8507578f7aa3c91f88c1425e31c00b3b9edf

    SHA256

    ad2d5cd7bb9ad5e1ddba02e2455740a2b84f83f2a929ff8e862b6ef77dddf12f

    SHA512

    5c28e3ae7a3735b66c220999823522a20242ccd88977ae85f557ebb3c62b76417a496a6c74d2cf7a1592666e9f6ff2cd32492c18a8b69e67485849ae5f7dc883

  • /data/data/com.smsreceiver.dhruv2/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
    Filesize

    8B

    MD5

    78810d6ddb4e2f5638636fff2b9cf374

    SHA1

    f9f78320044fe9f88283daa51e2ab632d9a01d94

    SHA256

    30bdddb386bd15e5b76a5ff2212aaef90ac85e0c09487ee40c5e261af54a597a

    SHA512

    138e1420f805b73f2ddf430778391b79a97a5907b3a22228bc7ca4f84c772c0c6722d0f46a20a22bacbd842c911640c976fc1bd90390a8ed320a7bd0e7a2552a

  • /data/misc/profiles/cur/0/com.smsreceiver.dhruv2/primary.prof
    Filesize

    1KB

    MD5

    a5012cad2232c9f963f1d90cde29c739

    SHA1

    499ba125fb441ca3a90399d5f3b8311583df7c09

    SHA256

    1c49f2e969073c0fc77852512b0b1642aea26260e421c9bf1ffc93134ff06202

    SHA512

    664ca07f4425e5cafc9b49d2a7c407c35fc349539ba620b080a3ee0635b92c839dd981da2d2d65403e25f59556b71e33b85a9607f86942b1d93d1e9490abccb2