21b27c0e14e8e4d193e134440f2a863721f80a6d96521ead46bea71e0f89b1fc

Analysis

max time kernel
26s
max time network
128s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
26-07-2024 11:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4818d538f62d0f5a94b47cda5ff21236.apk
Size

3.6MB
MD5

4818d538f62d0f5a94b47cda5ff21236
SHA1

b864a6b27e6fce722a17ec27a3b6478ecb235230
SHA256

21b27c0e14e8e4d193e134440f2a863721f80a6d96521ead46bea71e0f89b1fc
SHA512

15fcf1ec37fbcb8835ad88d08aadbc7d465b96958899e16b9b75fbbe2d1861a4cbf1337a8fd04d0de03245cdc448b20a74d7232cfbc4f61d8b6bff2dfe35416d
SSDEEP

98304:O8lGWVMz8PiEI/vw7Dh9EjRJvzhM0o/KrTgVy:O8Ly8PU/o79KnvzhaVy

Score

6^/10

discovery persistence

Malware Config

Signatures

Queries the mobile country code (MCC) 1 TTPs 1 IoCs
discovery

System Network Configuration Discovery
T1422

Processes:

com.gurujifinder.mjpro

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.gurujifinder.mjpro
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.gurujifinder.mjpro

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.gurujifinder.mjpro
Checks CPU information 2 TTPs 1 IoCs

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.gurujifinder.mjpro

description ioc process

File opened for read /proc/cpuinfo com.gurujifinder.mjpro
Checks memory information 2 TTPs 1 IoCs

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.gurujifinder.mjpro

description ioc process

File opened for read /proc/meminfo com.gurujifinder.mjpro

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.gurujifinder.mjpro

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.gurujifinder.mjpro

description	ioc	process
File opened for read	/proc/cpuinfo	com.gurujifinder.mjpro

description	ioc	process
File opened for read	/proc/meminfo	com.gurujifinder.mjpro

com.gurujifinder.mjpro
1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4249

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.gurujifinder.mjpro/files/profileInstalled

Filesize
24B

MD5
0894692f986059ce8c8f16a8c09d0366

SHA1
c1d83226c89ce9126d10f182ebf5756dd8713687

SHA256
b3a8cebc8cb731a17fd9108ab861f8f78f2c75e327bab2e3ea3c9e4412cc4636

SHA512
3314bfaaa91f311b3ea9d87212de405d8ca3cc7d80c2edef8bf5762b9e2599598d62559beedd1586e0f132f078b432abe9bb8788bc8076c835567d263cdde8c2

Download Submit
/data/data/com.gurujifinder.mjpro/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
1cefc5131c662b3aa7e08773a1b9423c

SHA1
e5f3238d799933b5408d7f8e52818627f201f0bc

SHA256
1d141dee891db7772718b75353243192f0ed398c2b01cf8d9cb6652b32df55ec

SHA512
57371a4cf08329c83ddaadbf4d1935b76eab1fe8706ee345acd603bcecdb13a651123893111f9a511f98b1c4ea079c98855a24d598f95bce8d6a5f2a215d90b0

Download Submit
/data/misc/profiles/cur/0/com.gurujifinder.mjpro/primary.prof

Filesize
1KB

MD5
654d88f97c7a9df02da17d3b3ec1548f

SHA1
996705cede55723e80f019cd03e9bc1f857d341a

SHA256
55a7843808faee02c2b0e2a346cea16192475acc6b465e67fd01043a041b0ebf

SHA512
90d1f34e4de2ef97ae67494cacac5d6cb48b588186db28e95413befd252420cd716fdca0e531694bea1026cc02abf73ab7cd88105c0ee18c6dc5f37abff72109

Download Submit