3064a904bb493d3b2621fb3a17519ae2e3ec7a98130b7e10e2573d384fcefe48

Analysis

max time kernel
7s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
16/06/2024, 22:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7723box_pjz.apk
Size 3.3MB
Sample240616-2f6dfsvglp
SHA256 07d5827ef21744d399bf1888c198a3715235c887c0abc82cba3545b9864c3837
MD5 2dbfa511a770cb9923d85b15a9841848
SHA1 7618c9af34437781884bec561d12ed2a0781e56a
SHA512 fa718fde2af8f491407c927550410eb5eb6a40dc4df144507bd63b285ab7e8b630db85d11da5572b5ecb5b88ed38cc1cdc0d2fa7007717c17ac67ac859ac24be
SSDEEP 98304:V3XuuHwWUJrVwUOLuAXaK2Koz8sdw428SlZLx9pvY:hx0rVwUqqK5Iw42vTLx9VY
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery impact

Malware Config

Signatures

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.upgadata.up7723

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.upgadata.up7723

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.upgadata.up7723

com.upgadata.up7723
1⤵
- Queries information about the current Wi-Fi connection
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
PID:4265

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

ContextData.xml

Path /storage/emulated/0/.DataStorage/ContextData.xml
Size 111B
SHA256 d05d0e9b984c3013faa39efd492b634370c64a8095130583e2ec60f56542537d
MD5 4ac2041516beeec8514da6d7a458f538
SHA1 d78a9b7ddbfd6f8effef094d95070bbeef4b9b04
SHA512 9dac45fcabfc7b005fd8b6898be3a64bc95797b7f8612cf2f3561f7f6a5e803bca58dc196ac5606438fd628db3e3bc963b707aae49ac9ca83510beab7da41f41
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 65B
SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
MD5 9781ca003f10f8d0c9c1945b63fdca7f
SHA1 4156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA512 25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 111B
SHA256 b98c036e94c4cd3c3cc563d06c1b200ce6e697668cbc651929d66be93bf7c94c
MD5 09a7b15f4a130c3c0e8f15f682996530
SHA1 6300fe77d79e3304a1c39dc3db85e603137db07b
SHA512 38da00ef284213120d51a11b8b8d30809a4ee722440565b271afcb01a4f9345402984f38f432a439709aab9e0c22ac117843f33b1b2681863e66e7ea9e2aed4b
MD5 SHA1 SHA512

Submit Download

Alvin2.xml

Path /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Size 381B
SHA256 e063363cea45b97e7acb93b11bfa0c74af76d08b17f7ecc2ec8ddf7c74da6e2a
MD5 1250faa74ef46feda62f9a4f502eafbd
SHA1 5c265277129430364448fb4e224dff9794a60967
SHA512 120a225529c5cefa48021b211c7aab4754956673e54cf2a31514c87b52542228be0829e36fc12f8e676759ca959262e9e3779992e07a435c24bbd518c03e645d
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads