b86590cb117b0f5cb7b8f544b0f072a8a7ec011cf0465b5e956338ca41f63e8b

Analysis

max time kernel
47s
max time network
137s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
22/07/2024, 06:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b42b7c037da8b170782d95da5512a86a.apk
Size

6.3MB
MD5

b42b7c037da8b170782d95da5512a86a
SHA1

0a0c1347817b861f82081914a96b15b425840f96
SHA256

b86590cb117b0f5cb7b8f544b0f072a8a7ec011cf0465b5e956338ca41f63e8b
SHA512

c625802b3878695e05343cd3f8f239208854bc1ce7267650e08b4d35171e09866474cf333036b2288f13b2da5bd12e50130bb5458e9425ca2aedbcda25879955
SSDEEP

196608:5bt8E+A0RNY80R7edzy9lUwuw9g5fKpdWgIrgx0uDmR7FRT:56E+x+8Ukwuw9g5fKzWgIrgwT

Score

6^/10

discovery persistence

Malware Config

Signatures

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.example.img

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.example.img

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.example.img

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.example.img

com.example.img
1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4266

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.example.img/files/profileInstalled

Filesize
24B

MD5
568a75d0a66ae7879e0bf92df4f4ab4b

SHA1
20b884c33d46d11b7cd5182cf3c0eeafca4ec191

SHA256
48a507795961bba31ccf22db50b3c2dab2488b69e847eb30a490d07159de7f24

SHA512
27428821459a225ed649404ea26acf721aac370d3b1d18577931433e68efa55f5247fade26d884e27a067c728de1a7f96e7091c8231f0af9daa57f9a537130e3

Download Submit
/data/data/com.example.img/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
1e90527ef89aeadef4e0d2c65cafc86f

SHA1
1c6945aea381b77e991b125040fb12a3f390d8cb

SHA256
acbf750f7445f379e99128379011d2d209817aa0d8fe8f61b1d9ab296a5fe4c7

SHA512
c9d752af95446e816ef28ad135c32568bb36c10748327b306690759ac7b22f69f5eb5addbe8bef81298148c880c921b9c9f0160b79443b04aee0d15d5abf2150

Download Submit
/data/misc/profiles/cur/0/com.example.img/primary.prof

Filesize
1KB

MD5
0430dc05abf6731b46b9b1e0ac9c681b

SHA1
2c06df49f047e646f10340696ab8af5672892441

SHA256
3c0b7ee856ab0e9874997058bda0034ce1b2d6c71efd6db2825c44acfd027b4c

SHA512
50c03a4fddfa8f9faec7147633908460e27b6b996758dc390fd4dc55ca937334d7a096a951e60077e786d3d77e06f0a28890b11a018692e9f60cbaac915f7f00

Download Submit
/data/misc/profiles/cur/0/com.example.img/primary.prof

Filesize
4KB

MD5
e3aea3409b8bd683e637f2acde3c20f8

SHA1
1cd72ec0ebdf7c598eb2fb1f019175a366dfcdc9

SHA256
04fb5f9cc4e1ca472b6b5b7b67b67ccb74e8c0c75552aff2d8d15afba5007698

SHA512
42fe218fbe6c05fae89a7efa0f3aa0daa7a362e85d1b1613d346c89be0517fb3311f4a30569729b611f98307b146c45c79fe8c34601802fbf8da31c250b96121

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads