Analysis

  • max time kernel
    179s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    17/06/2024, 04:23

General

  • Target
    stasdk_core.apk
  • Size 2.1MB
  • Sample240617-ezzzfstgnc
  • SHA256 50b417f6a0b261458a858d152adf728914eddcbab1bd83ec25dd5fbad416c77e
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • com.dbgj.stacore
    1⤵
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4262
    • getprop ro.board.platform
      2⤵
        PID:4299
      • getprop ro.mediatek.platform
        2⤵
          PID:4319
        • getprop ro.board.platform
          2⤵
            PID:4342

        Network

              MITRE ATT&CK Mobile v15

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              .systemid

              • Path /storage/emulated/0/data/.systemid
              • Size 36B
              • SHA256 0ae0b3b1a493ca5edf6f7e6452685f381eebf3a8bbb4c15ec9db016daffa6f0a
              • MD5 SHA1 SHA512

              .systemmac

              • Path /storage/emulated/0/data/.systemmac
              • Size 17B
              • SHA256 c248c629af1fe0a8c46b95668064c1d2952a9e91d207bc0cc3c5d584c2f7553a
              • MD5 SHA1 SHA512