7b4205434ee5e282cfaaf694e14e9e79733cb9e50dfab053393814db2b1d781e

Analysis

max time kernel
8s
max time network
138s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
26-07-2024 22:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7b4205434ee5e282cfaaf694e14e9e79733cb9e50dfab053393814db2b1d781e.apk
Size

2.8MB
MD5

5e0f2b3ddb42558ba68214eb3a740b70
SHA1

f996b6bb40e15430354b10bb335869aa3bb7a13f
SHA256

7b4205434ee5e282cfaaf694e14e9e79733cb9e50dfab053393814db2b1d781e
SHA512

763bb32c1334591fa8d0e28759193751f8074d1135d27406e1b63fbb6ec9b2d6a1558b6fc1cdade4ece67e7b3d405e5fbe73251a4c5c7c76dbecdc6b8f1288aa
SSDEEP

49152:/s+R5ZHzGvncwwB9i3VoTQvbthe1W8FslW44wAyLzD1nl/gS3w6Y:/BRvGvncwwB9i3VNvW0839wRLzHRw6Y

Score

6^/10

discovery evasion persistence

Malware Config

Signatures

Queries the mobile country code (MCC) 1 TTPs 1 IoCs
discovery

System Network Configuration Discovery
T1422

Processes:

c0mm.mark.s4rk4r.indianb5nk

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone c0mm.mark.s4rk4r.indianb5nk
Checks the presence of a debugger
evasion
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

c0mm.mark.s4rk4r.indianb5nk

description ioc process

Framework service call android.app.IActivityManager.registerReceiver c0mm.mark.s4rk4r.indianb5nk
Checks CPU information 2 TTPs 1 IoCs

System Checks
T1633.001

System Information Discovery
T1426

Processes:

c0mm.mark.s4rk4r.indianb5nk

description ioc process

File opened for read /proc/cpuinfo c0mm.mark.s4rk4r.indianb5nk
Checks memory information 2 TTPs 1 IoCs

System Checks
T1633.001

System Information Discovery
T1426

Processes:

c0mm.mark.s4rk4r.indianb5nk

description ioc process

File opened for read /proc/meminfo c0mm.mark.s4rk4r.indianb5nk

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	c0mm.mark.s4rk4r.indianb5nk

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	c0mm.mark.s4rk4r.indianb5nk

description	ioc	process
File opened for read	/proc/cpuinfo	c0mm.mark.s4rk4r.indianb5nk

description	ioc	process
File opened for read	/proc/meminfo	c0mm.mark.s4rk4r.indianb5nk

c0mm.mark.s4rk4r.indianb5nk
1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4265

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/c0mm.mark.s4rk4r.indianb5nk/files/profileInstalled

Filesize
24B

MD5
a21f7d990ba8dd47dce37214ba2557e7

SHA1
cd8c344cde763b413c46ccad4407bc9fb4a328c3

SHA256
3e898e51827831eaf4040a1b59326de4d0e39f1c720a5b0edde4d43cb442f61d

SHA512
0c5f4d8acf0c2031a50aec0a1e321ebf0a849930d01ac44689748b52ceeb2527b54a876c9a448114958d38c3acc21f4f676c045cb69b44a2fd1f3cfe2afa15de

Download Submit
/data/data/c0mm.mark.s4rk4r.indianb5nk/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
f2cf6c4c848684be598688c673aa98fe

SHA1
8a2a7655387040e02952f77b6d0a938abf043568

SHA256
7e33fcbc323849a5d3c2f13f822e2e846decb9f9755c226056aaff6e739ff400

SHA512
5ba81156fd615f177a5e5beb22f177c2f736abe43144725c374b32bc5aaee8ac822978e746461c5f4ce0a1a36cab3ad7a4dd141584a82eb48e2af97b9a291b5a

Download Submit
/data/misc/profiles/cur/0/c0mm.mark.s4rk4r.indianb5nk/primary.prof

Filesize
2KB

MD5
903c9a1ca4a3e7e902f2e0cfb1df0db0

SHA1
9f710d1588b435a9a760e2c4d8127d79b1d11a24

SHA256
f853b2a280f1588bd5c00802f7de206424ad0a3c46ef905e1d4c4276a867e1ea

SHA512
681725372c49b5c7bbde6f3e30065b682cb05f327c1de8cfab2e2aec6f1a91528aa76a8e8031c223b4cbf207955071c395f936ffb575ed33c39661d4167ef8d4

Download Submit