Analysis
- max time kernel
175s - max time network
185s - platform
android_x86 - resource
android-x86-arm-20240611.1-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system - submitted
22/06/2024, 22:29
Static task
static1
Behavioral task
behavioral1
Sample
786cb3926d0c3607d6a9e9c32363d8e0ef768ac13f72e46d1bdfcc0b9885b10c.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
786cb3926d0c3607d6a9e9c32363d8e0ef768ac13f72e46d1bdfcc0b9885b10c.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
786cb3926d0c3607d6a9e9c32363d8e0ef768ac13f72e46d1bdfcc0b9885b10c.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral4
Sample
Hook_apk.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral5
Sample
Hook_apk.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral6
Sample
Hook_apk.apk
Resource
android-x64-arm64-20240611.1-en
General
- Target Hook_apk.apk
- Size 1.5MB
- Sample240622-2ec1hsxdlb
- SHA256 d009178e5275e0ab31cf056e2293bb7eb1a9765057eb8616b29fdcd7166eb12a
- MD5 61a221416d804cd7bb7fad61e783f7f1
- SHA1 83498040d429dc2f1b2c397700e43b9cd3dac3b5
- SHA512 d9bcfc375020b18d1091adf9c409512130e7bd6ff37cc130edd0d36c585fd26196f2b73002a55f85724a9a8811f2299e1092c87de2131bcce9c79b847f46acd0
- SSDEEP 49152:jsMUE9wEObBTwJ3DdT0fgBJ84codzbyc7Eqx:jsMUEXOUT8gjcod3yHqx
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.indusind.mobile - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.indusind.mobile - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.indusind.mobile - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.indusind.mobile - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.indusind.mobile
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.indusind.mobile/files/profileInstalled
- Size 24B
- SHA256 4097bc2e931a74f4c96882a15f8fcd3a13d9f29b27a9e9d23d16b31fdce44426
- MD5 98b59481a65837a252a9137919b2ae6d
- SHA1 3fbb3ebaec0cb9106333593acc9c027945649e53
- SHA512 34fc4d87fd0926134fa06d4fb3b4a01b8c99fe13df1e7cba55a5ef175a2bf9ed3b1e240a727238c2bee14840a0b9192df0e7091ac388188bc53b856c65b0e881
- MD5 SHA1 SHA512
- Path /data/data/com.indusind.mobile/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 5b4ef605c028fc5c44fda08a2579358af31077b16f2a09cb7e87ab0b2cd789a0
- MD5 1c84c35145836a04ac0e594b7d24ae17
- SHA1 975f1d1dd2d58ca148de6d095c1edf6411eaac80
- SHA512 4b1436815bb69af4cf0537e672d7f400d903fc2591fe243fab7cac7753ad4c3fbd5ee4663889cc63613bb755518e4c980bf6286c85afdb0178194f61e8579b6f
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.indusind.mobile/primary.prof
- Size 762B
- SHA256 0e8768fb943794e4af8945102ceb2cc3ad513f3482bbab34696ec4dc10ac6107
- MD5 b4ad97359ddd25c25dfb4fe9c455be58
- SHA1 8d1520b82b2e91243c836117638e943d1fa35484
- SHA512 2c02a5be90ef3e69c05fd5e2dc2e0a8b972d923124e619f8ae2bd9514958eb6c519bf9bb2dd7011f780a785b705ab833841559f8ebc97689da099b36a1e95ef1
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.indusind.mobile/primary.prof
- Size 3KB
- SHA256 2d7ec94e001b990f0028ecd4633644d813b3e0504806251e9bfad918e54a9e7d
- MD5 52de3e863553f57bb373527a7cff61c2
- SHA1 3986f8d9f78c98c413e194fca9647e7c1701e37a
- SHA512 a8248d69677cebb90e0c6b7af7e0217cdb53d94fc7b3b42b3200a642295cabae04e47dcd71c4714918df20e69558d9f9d39bd898ae202d955e3ee348add1d965
- MD5 SHA1 SHA512