161c8274f6530ee56fc2435577b52e32ebd8e2876dcb0c072898ec112f58767c

Analysis

max time kernel
162s
max time network
138s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
16-07-2024 10:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f20a0bac3df3c4d724579608f10beb1e.apk
Size

5.3MB
MD5

f20a0bac3df3c4d724579608f10beb1e
SHA1

a0aa8c2686309aa0ffe8e63a29d7fb74f5338c05
SHA256

161c8274f6530ee56fc2435577b52e32ebd8e2876dcb0c072898ec112f58767c
SHA512

c6e5ac138d9bb62f244f679e934bf435ad913633114b613e72ad42411a2f5f2256e399ae5fa5d9ce48ecba0b9d9840f04363d3aa8eefa7ebe37006e4bb122171
SSDEEP

98304:bX6vH0fpdsCl039pnVVuzpVMAPHS8rf/O+T1LU2ksCqWxi1dcAX7LZoTwr5xpiT0:GvH0fpstpnVMVMAPHZhpLlksd1cA9pN

Score

6^/10

discovery persistence

Malware Config

Signatures

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.example.shineinterview

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.example.shineinterview

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.example.shineinterview

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.example.shineinterview

com.example.shineinterview
1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4218

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.example.shineinterview/files/profileInstalled

Filesize
24B

MD5
ec53da1525bc64affa6cd687998229f9

SHA1
d666598fde7e75ab314dea9d3037eab492c2260a

SHA256
46816fb2901a64b8efb054a18e1f46627804922ef738b5e3063b97da822cd8fc

SHA512
48e7c3a8b8af014b5ba1542aef696a5be5e15b8f6f2f526bf547b3910a090f2cbe5646abfb47e156ea491effddf3b2ec91860fd6bb15038ace51a3be665b7026

Download Submit
/data/data/com.example.shineinterview/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
727341d886726a5dbf50c6958309552e

SHA1
33df357636a885e7a34a391c52e1d2652371c538

SHA256
403ec70a42c3a205a4a3c976d70f8a10d0a622faa7d4eaad71fc3c5c76e6ee41

SHA512
666a3bf21ccdf7b7962c115b0a3d0db98d740fead8b0d35ef06839cfc543c8b194eaab0a7e55a6d05dd71e427f68f08a81e4a2e8e871369f6f8ee2f65857b777

Download Submit
/data/misc/profiles/cur/0/com.example.shineinterview/primary.prof

Filesize
1KB

MD5
a9c5111aad72022a092dcf2436762c8d

SHA1
26a467b78bc11a467f4606a31e6b3fc2ea72f0cb

SHA256
dc7cb49f8558b6696e2d2a8bf432ae36735e2aaebc0697f3745d97edb6e42a76

SHA512
d86a5a4b4d30f148b6c115d7ff192e796a91a228a8f9314fca355a558feaff343eb55bd5265cf543ab61f0aba5d0352fc9d6ff2d38aca1592075855167919d33

Download Submit
/data/misc/profiles/cur/0/com.example.shineinterview/primary.prof

Filesize
3KB

MD5
5dae49339a78a3c58eb7099b568846e8

SHA1
79dd7626094151579d0f57baf118a7e871aaac05

SHA256
f2ecccd51f42c58a95979a0e20964db3b28557814a8d949c52410b11c2d8e1eb

SHA512
7795b6556696440ff94db6495ce9678917e0d4aeff49191f53858e030af91169d977afc6ace6da20188b5836fb4a9ebaa81dd0fe52163212e74ebfb3b6dfb084

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads