Analysis

  • max time kernel
    8s
  • max time network
    138s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    26-07-2024 22:04

General

  • Target

    7b4205434ee5e282cfaaf694e14e9e79733cb9e50dfab053393814db2b1d781e.apk

  • Size

    2.8MB

  • MD5

    5e0f2b3ddb42558ba68214eb3a740b70

  • SHA1

    f996b6bb40e15430354b10bb335869aa3bb7a13f

  • SHA256

    7b4205434ee5e282cfaaf694e14e9e79733cb9e50dfab053393814db2b1d781e

  • SHA512

    763bb32c1334591fa8d0e28759193751f8074d1135d27406e1b63fbb6ec9b2d6a1558b6fc1cdade4ece67e7b3d405e5fbe73251a4c5c7c76dbecdc6b8f1288aa

  • SSDEEP

    49152:/s+R5ZHzGvncwwB9i3VoTQvbthe1W8FslW44wAyLzD1nl/gS3w6Y:/BRvGvncwwB9i3VNvW0839wRLzHRw6Y

Malware Config

Signatures

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Checks the presence of a debugger
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • c0mm.mark.s4rk4r.indianb5nk
    1⤵
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:4265

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/c0mm.mark.s4rk4r.indianb5nk/files/profileInstalled
    Filesize

    24B

    MD5

    a21f7d990ba8dd47dce37214ba2557e7

    SHA1

    cd8c344cde763b413c46ccad4407bc9fb4a328c3

    SHA256

    3e898e51827831eaf4040a1b59326de4d0e39f1c720a5b0edde4d43cb442f61d

    SHA512

    0c5f4d8acf0c2031a50aec0a1e321ebf0a849930d01ac44689748b52ceeb2527b54a876c9a448114958d38c3acc21f4f676c045cb69b44a2fd1f3cfe2afa15de

  • /data/data/c0mm.mark.s4rk4r.indianb5nk/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
    Filesize

    8B

    MD5

    f2cf6c4c848684be598688c673aa98fe

    SHA1

    8a2a7655387040e02952f77b6d0a938abf043568

    SHA256

    7e33fcbc323849a5d3c2f13f822e2e846decb9f9755c226056aaff6e739ff400

    SHA512

    5ba81156fd615f177a5e5beb22f177c2f736abe43144725c374b32bc5aaee8ac822978e746461c5f4ce0a1a36cab3ad7a4dd141584a82eb48e2af97b9a291b5a

  • /data/misc/profiles/cur/0/c0mm.mark.s4rk4r.indianb5nk/primary.prof
    Filesize

    2KB

    MD5

    903c9a1ca4a3e7e902f2e0cfb1df0db0

    SHA1

    9f710d1588b435a9a760e2c4d8127d79b1d11a24

    SHA256

    f853b2a280f1588bd5c00802f7de206424ad0a3c46ef905e1d4c4276a867e1ea

    SHA512

    681725372c49b5c7bbde6f3e30065b682cb05f327c1de8cfab2e2aec6f1a91528aa76a8e8031c223b4cbf207955071c395f936ffb575ed33c39661d4167ef8d4