Analysis
-
max time kernel
125s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
10-07-2024 22:05
General
-
Target
a91398695b9b804540f63f160d72ab718176b28bd15e18c364fc1124caddd710.apk
-
Size
2.5MB
-
MD5
29adb7b79f6106a3f9e3ae1d4fcca076
-
SHA1
0b35ccd6238a9dfab8c09ac48eef649359bfbc48
-
SHA256
a91398695b9b804540f63f160d72ab718176b28bd15e18c364fc1124caddd710
-
SHA512
cc7e98cef2a14b170b2d82841a07d68a5cdd002a1340321e0ffd7550c02a46707a1c113f617cfd71618d166982abaa927318ee2c30d18f9041ec9323e7152a34
-
SSDEEP
49152:YbnY2KgxK4gWfCZ2ZrlZOkVhuDFoQCP0kqXayrDlwWO0x:NgxKsCZ2ZrlIkXTxGrDlwK
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
ir.piceof.godmlt1⤵
- Makes use of the framework's foreground persistence service
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information