Analysis

  • max time kernel
    179s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    05-07-2024 22:00

General

  • Target

    3564cc3bf27a7a0a0127547429141fa99dd20e5a53f86bcf41ea377b09418c2b.apk

  • Size

    2.7MB

  • MD5

    022a9560b28130e21131055305011629

  • SHA1

    79bf171d37476ac24ec2b5f9201f121d1571f90b

  • SHA256

    3564cc3bf27a7a0a0127547429141fa99dd20e5a53f86bcf41ea377b09418c2b

  • SHA512

    df1d8c33e13be9ca4ccd927bd7461b10dddd625fab30b190bcf06ab8925954f11a3e775576224d29a7e932c9f18fa5dbde40acdb9cb8fb71a67abe1eef2abdd4

  • SSDEEP

    49152:NDEnq/W9aV8puatiFdBORUVgZSeo/KrmF:NDEnq/jFdBOvo/KrmF

Malware Config

Signatures

  • Removes its main activity from the application launcher 1 TTPs 1 IoCs
  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs

Processes

  • com.gogo.post
    1⤵
    • Removes its main activity from the application launcher
    • Loads dropped Dex/Jar
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    PID:4494

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.gogo.post/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

    Filesize

    8B

    MD5

    61612edd712c19b237169a5553ffdce2

    SHA1

    630d8f8073615a2d76244e0a46bb3c0ddcf77faf

    SHA256

    9142905fdae2e1552c96a3d2799aaf2610297ac698f24dc1f813c5796d7a4cfc

    SHA512

    6a8d9cc3c33e114c4663e5c71dc2a778d3263a71f39f76e5979c234b0eb7f6742ea28366f28adecf4f488702a4d17fc28568519c82bbace6aafe549189455d67

  • /data/misc/profiles/cur/0/com.gogo.post/primary.prof

    Filesize

    875B

    MD5

    aad30caaaf88d4ecdd2dd73056b5af9b

    SHA1

    aa40fe4ef130173ffa241194a467be7122ac492b

    SHA256

    67f8da9b5376be56d7842977ff1e2b5fe4f16448ac2124f85d2a02d7652e8f70

    SHA512

    df8307e7ab401f12b3bf8e3af21d402a70723e0d4e3b0ec9722bcd426750b73043b9512f5246a965ac922e4c721cb3ce4f87eb8e928192b5a156b21334d51e6f

  • /system_ext/framework/androidx.window.sidecar.jar

    Filesize

    12KB

    MD5

    bdf3529e80318eb14e53a5bf3720c10d

    SHA1

    25c9ace4b1af6e80ebb2572345972c56505969ba

    SHA256

    bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

    SHA512

    48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b