Analysis

  • max time kernel
    9s
  • max time network
    133s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    23/07/2024, 22:05

General

  • Target

    399bde41f7bbac87f4825ed211a5baf4ed6192ff18081a873b190fb0cb63b200.apk

  • Size

    4.1MB

  • MD5

    34f06fdb86fa8c61ad2e1314aab45d32

  • SHA1

    55209f5b86ac1e948a1d754926ece890a42504d7

  • SHA256

    399bde41f7bbac87f4825ed211a5baf4ed6192ff18081a873b190fb0cb63b200

  • SHA512

    4ed3f96fe6717cf37f1e6ba02e8c065949e37af1dcc307670ccb221788f34934c7911ba301649938ee40f17364b7b5af037e3ab096c2d1b31d57a9909b997ef8

  • SSDEEP

    49152:5QqYy+j7m05Vn8gaCdcjd9I9I2gLU93i0rh935rw8hO/nDq90w5P80qkT9dBboI:ia+Tb9j3i0rh7rwMO/nDqye8FAd5oI

Score
6/10

Malware Config

Signatures

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • app.limits.gateway
    1⤵
    • Makes use of the framework's foreground persistence service
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4237

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/app.limits.gateway/no_backup/androidx.work.workdb

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/data/app.limits.gateway/no_backup/androidx.work.workdb-journal

          Filesize

          512B

          MD5

          f38d2da62b2be0046ef5129eb792c482

          SHA1

          d8f4c206692aa2e230cbbf024effbaf6322a459d

          SHA256

          2ac2dfd6edf27d89cc3285c722c440ea5c043b2c242e7bb02f606c79a1195098

          SHA512

          7b3ae911213338d1f2aedda34ca5ce714f13a9669be895b9d4f15382477f2e7409e686e76c3b85e87a8ede4685c19bfa2fea3a938e28203c2ada7dbdff007802

        • /data/data/app.limits.gateway/no_backup/androidx.work.workdb-shm

          Filesize

          32KB

          MD5

          bb7df04e1b0a2570657527a7e108ae23

          SHA1

          5188431849b4613152fd7bdba6a3ff0a4fd6424b

          SHA256

          c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

          SHA512

          768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

        • /data/data/app.limits.gateway/no_backup/androidx.work.workdb-wal

          Filesize

          16KB

          MD5

          51428e0715f5129920fd10c3b931dd16

          SHA1

          3c347d9fbd1598ddcdeb89e8cea6a520d1f093e4

          SHA256

          6fcc3e1f3ad6d3b801e9d3ba2ea56aa6fa6dc33152b3f30b6ffc17102648eda0

          SHA512

          2eb7bfed4c787d3262b3b2648afe10f065af9530ccef92fa4b425e04655a4324274593975e3db1a50734532413a9b86bf49253a7d6573711c13ebf066f343626

        • /data/data/app.limits.gateway/no_backup/androidx.work.workdb-wal

          Filesize

          108KB

          MD5

          aa532539d8b04bb060e4b34c597939a2

          SHA1

          0b98512fb813813e82455e624679c7ea58469aa7

          SHA256

          ed1746f5981e29fc004ee193f209c019697dd87e8ce958fe8fcf7fe694bbd9db

          SHA512

          fb0182899a641679cae81e6ae00fe36148d9c79bd512f2b206da8a5c5d488462f46b48f231af5cfed76a9ce045eefae30d58d5f81024d072b60a1eea9bbbc962