Analysis
-
max time kernel
193s -
max time network
335s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
03-07-2024 21:13
Behavioral task
behavioral1
Sample
sms eye app_src_mod.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
sms eye app_src_mod.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
sms eye app_src_mod.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
sms eye app_src_mod.apk
-
Size
7.7MB
-
MD5
ce9377a43039e9a9b6d19cddfce9f35e
-
SHA1
88b24c7c0a26abc6a8284c74af21af7ca044e288
-
SHA256
e7cd1bcd6452bacd1176be56d183d4dc4960615740d854c686a1b1e3d8cd13e0
-
SHA512
c29b990b584ce46d7d25f12299dc04488cc5c8aa2503b3370ca17aef114990d618f060c3f6518bbf59bdad7eb405ff9249ee77cea8b3a6b2f1084c014e820dd6
-
SSDEEP
196608:KwXcCnmhMHi3xtvYrJaOy/4JsaiSxcymkF85:KkXmeifuarAJpiFymk2
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 4 IoCs
Processes:
flow ioc 41 camo.githubusercontent.com 42 camo.githubusercontent.com 43 camo.githubusercontent.com 44 raw.githubusercontent.com -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
abyssalarmy.smseyedescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone abyssalarmy.smseye -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
abyssalarmy.smseyedescription ioc process Framework service call android.app.IActivityManager.registerReceiver abyssalarmy.smseye -
Checks CPU information 2 TTPs 1 IoCs
Processes:
abyssalarmy.smseyedescription ioc process File opened for read /proc/cpuinfo abyssalarmy.smseye -
Checks memory information 2 TTPs 1 IoCs
Processes:
abyssalarmy.smseyedescription ioc process File opened for read /proc/meminfo abyssalarmy.smseye