d0daa4ffd957a54e54c41c81dfc5fa481aeafeabc98029b75e8f13b78c9b6351

Analysis

max time kernel
10s
max time network
15s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
25/07/2024, 13:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9641c55ca649c26ff9bf2932e970c553.apk
Size

5.3MB
MD5

9641c55ca649c26ff9bf2932e970c553
SHA1

989277e285bcf8687bf937e27f80028e01ab8196
SHA256

d0daa4ffd957a54e54c41c81dfc5fa481aeafeabc98029b75e8f13b78c9b6351
SHA512

e39e7f3d8c5c85e8b08f8ea4207328d6a440502f3c6f52747ef3342aad35c90dd9681464e04d5e1550c0c9f1f0c00997d83b82e9f4b5141ddca26ca0c66867fe
SSDEEP

98304:uLhK/jk5IH15VFZW1s2/xZ+hbFqF/G89vtqanxNPtLyCfWXpOyrAEj3dYMYMvo/n:+c/jUq15eohFRsvtqanLPVHWXpOyr9xI

Score

6^/10

discovery persistence

Malware Config

Signatures

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.gurujifinder.mjpro

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.gurujifinder.mjpro

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.gurujifinder.mjpro

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.gurujifinder.mjpro

com.gurujifinder.mjpro
1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4255

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.gurujifinder.mjpro/files/profileInstalled

Filesize
24B

MD5
547ead54ef676e07303b063b1da9d21f

SHA1
cfd7e61390cb81e7bf5d9fd2810bd27c68f27792

SHA256
41caf5630ad0bedb70b71c26c21163838d87bb607457be11c906839341e87f30

SHA512
4277682a30019dd45ce5527760ea6afb471563237df1a1f33e79ffd2de5579918f9a9cd9a1d566ba3ee7cad88b7050456c4616bc28c34b1364046019b3485d46

Download Submit
/data/data/com.gurujifinder.mjpro/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
5d0c23034b1a660df022340eb556c278

SHA1
b81b1110e6f54381e6e979a86cd4a1043f389e78

SHA256
48c7a434f3dcb51b6a4b575afc8dba0ea7a5c94c77bfa83bb0e0782398374a1b

SHA512
349135446c6a3db153f785a51ea78aaf20b0d3da76328b2538831a6f9498f6698560e9e676bfa8047253d73c261fa7a1b25e9b95bc3321b439486875a54288cd

Download Submit
/data/misc/profiles/cur/0/com.gurujifinder.mjpro/primary.prof

Filesize
2KB

MD5
d1d6a5aaf24fcd4f964fc56fa8eabd9c

SHA1
6fa744180eb33146dc308483564179dc588ae1f9

SHA256
d2616284cdaab55956ba19ae2c5e1257be3f5f253a336ac75e6c7d6aad4f7022

SHA512
74f366e4cf64cf1c3b3d765685343feb9ea0fe46c1964dd200e9f5a7be06b3a033f05b124e3a24c1023ec33df299c0c495ad6e28b5882607c8485e1aabdf2669

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads