Analysis

  • max time kernel
    2s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    10-07-2024 12:02

General

  • Target

    Magisk-v27.0.apk

  • Size

    11.9MB

  • MD5

    4475064c5f6a5474e31f2f3dfafc22ed

  • SHA1

    872199f3781706f51b84d8a89c1d148d26bcdbad

  • SHA256

    f511bd33d3242911d05b0939f910a3133ef2ba0e0ff1e098128f9f3cd0c16610

  • SHA512

    cf6095f2d93e078f42d26265699deed377af12f304dd83179140d32a69a034639d4e07b83b8bb999d503f6d8dc6ced46b6b88741ed39771eed6a12411648e4bc

  • SSDEEP

    196608:tHkjVWApVgQBoMrdr+TnhpPsOz0VbMtiquy/WP0SxqdHgCg2RNB2KNcjktbs1:tHYGQBpdqpibWDe0SuH6WNBrba

Score
4/10

Malware Config

Signatures

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • com.topjohnwu.magisk
    1⤵
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4313

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.topjohnwu.magisk/files/profileInstalled

    Filesize

    24B

    MD5

    0c3533ba1ebac7ac942815e1e7103d0b

    SHA1

    26673dfacaad2dc1694eccf9bbf35643484760ba

    SHA256

    ad7495d24f6921c31e961ff54efc2c10e09d8e5c82407d7fdb9c0a78ae6566bf

    SHA512

    a516b75eb9bf4351d843f762177b28d91a577bcaad4a68d00c6332d8c9e09d6053658413514127c94b3e4f438cacd3b81e600283af009f558ca75fbe999a6093

  • /data/data/com.topjohnwu.magisk/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

    Filesize

    8B

    MD5

    da782ff4711d5973260280ca3b080476

    SHA1

    333b11cd12cc2f4e87df76920a8d63654c22841e

    SHA256

    2b1c2e753eb0a5b68e4b47ae3a9edff04cf38e58ef995931f774e301ddde0ede

    SHA512

    01de142b6cb441bcd549fbcba72a67922a387b368f73b084ff44376982aa51ccf3c21a672780a5db9c0bb26cd8404fc1c2cb574ebd9b94070abaf4829216eada

  • /data/misc/profiles/cur/0/com.topjohnwu.magisk/primary.prof

    Filesize

    2KB

    MD5

    1a6b66bb28fd3cd838884f168b48ddcc

    SHA1

    902524d1db3ef9be7d5a42fa59a679ae9e342820

    SHA256

    c26a72bb48f7d06d6d16b660802a1af72615722f79bcfbd17af9a0d08ed50c65

    SHA512

    b11bc9814178970547255a99a3fbc51121e16871b4b717ad0066299d00f0eb6f7f9599ca5af7a759e0262c3d82c2f26ea4be6784fe8238ab880aec073176e41c