5934660afc7f754f747cb29d37ad08c5e508954a10a31f8bca31cdd891e22909

Analysis

max time kernel
23s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
26-07-2024 22:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5934660afc7f754f747cb29d37ad08c5e508954a10a31f8bca31cdd891e22909.apk
Size

2.8MB
MD5

c282b2f6ef53a8e7789c36d40d3efcb9
SHA1

e36a106a9fef9ceef26744cbf1a9ffb897726b23
SHA256

5934660afc7f754f747cb29d37ad08c5e508954a10a31f8bca31cdd891e22909
SHA512

03be600f9d1f7079bdf2c3ef8635c85f604e38544f84d48425cbfc7639adcae300709b7826fc7f4ffdfb946eab640a4a562a1f90ac651f214025d6179d415a39
SSDEEP

49152:hPuv/8BT9nFL4ZjNVir5tV6LOHopToTQvbtht1W8FslW44wAyLtk1nl/gS3y1G:eKHEMVCaHiTNv10839wRLt+Ry1G

Score

6^/10

discovery evasion persistence

Malware Config

Signatures

Queries the mobile country code (MCC) 1 TTPs 1 IoCs
discovery

System Network Configuration Discovery
T1422

Processes:

c0mm.mark.s4rk4r.indianb5nk

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone c0mm.mark.s4rk4r.indianb5nk
Checks the presence of a debugger
evasion
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

c0mm.mark.s4rk4r.indianb5nk

description ioc process

Framework service call android.app.IActivityManager.registerReceiver c0mm.mark.s4rk4r.indianb5nk
Checks CPU information 2 TTPs 1 IoCs

System Checks
T1633.001

System Information Discovery
T1426

Processes:

c0mm.mark.s4rk4r.indianb5nk

description ioc process

File opened for read /proc/cpuinfo c0mm.mark.s4rk4r.indianb5nk
Checks memory information 2 TTPs 1 IoCs

System Checks
T1633.001

System Information Discovery
T1426

Processes:

c0mm.mark.s4rk4r.indianb5nk

description ioc process

File opened for read /proc/meminfo c0mm.mark.s4rk4r.indianb5nk

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	c0mm.mark.s4rk4r.indianb5nk

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	c0mm.mark.s4rk4r.indianb5nk

description	ioc	process
File opened for read	/proc/cpuinfo	c0mm.mark.s4rk4r.indianb5nk

description	ioc	process
File opened for read	/proc/meminfo	c0mm.mark.s4rk4r.indianb5nk

c0mm.mark.s4rk4r.indianb5nk
1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4254

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/c0mm.mark.s4rk4r.indianb5nk/files/profileInstalled

Filesize
24B

MD5
5c36455a8eaf5a93ccb1d0f0deb90ef7

SHA1
5a422116d3f48e2b76160e36b8e1d77fc66fe9da

SHA256
f9d9dec7cbf5ff69ec231ebb30411d808ccefa82362413c14acc05bb891bc970

SHA512
93bb0e9086db803bade885950dab1be5404dfb807b3eb593e5a7c417ca86e521b673f2228d51ed960c65159bbbae80cf05ba24333a3a73e24ec7e540780c1a2a

Download Submit
/data/data/c0mm.mark.s4rk4r.indianb5nk/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
7e7b6c4fb4f5cf12d2947a38eadd3e30

SHA1
605d43cde8d4e5aa759d47cf027bab7a1bda9f68

SHA256
bdfa7e3d14d1440fd320dc0a6b7545e868a24f6516a3f511cb7c53a131d1911f

SHA512
965df1a59c2b4ee39b6e924065e35135cbca9160d9b5f65db4d3666c31c80ab67d77db494d8e269325aa90e000eff469fa15aaca923e401b3c0f2c3e619413ac

Download Submit
/data/misc/profiles/cur/0/c0mm.mark.s4rk4r.indianb5nk/primary.prof

Filesize
2KB

MD5
0a41cb65e9953a7a04c187494c978ced

SHA1
b4890d9eab18ed3599409b90ba8f0222e187df49

SHA256
c4c5042c5fb312388cae7cd63f53a2c95f2c1272c38d4afe325e5a2e7db5e8a0

SHA512
e35007b5c112acdc884199f7f81999f85373fa172fa3eab608e0359fc9531deb27221a0d25b8c8873fabd6369d1e0f83cd2273c935b5735d4e4e3bc6599d80ef

Download Submit