9fd3b01c4be2c7bf38e742af078657e1acb8353a7da27fdeea087a8fe31268af

Analysis

max time kernel
9s
max time network
138s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
27/07/2024, 22:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

9fd3b01c4be2c7bf38e742af078657e1acb8353a7da27fdeea087a8fe31268af.apk
Size

1.7MB
MD5

54038b72e4b5385e4ee0d2dbf7bca2fc
SHA1

3a3d7a63f4a18e1e1115f21af47a8cf399a552b4
SHA256

9fd3b01c4be2c7bf38e742af078657e1acb8353a7da27fdeea087a8fe31268af
SHA512

2756dbb422c3ab49036f9d79b502de1b02097f6409c584793a935bc570bf521c3b2781710c1adf58ff9ae4c2275f7ce57bdaebec32049834c072b3e78889e372
SSDEEP

49152:oq+APEG7+Uq2LWdAyD3XxpXQzEsyKggr9gSdX7W:oqLPdSD2LW7XxpjsPrW

Score

6^/10

discovery evasion persistence

Malware Config

Signatures

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.piyankonline.testapp

Checks the presence of a debugger
evasion

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.piyankonline.testapp

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.piyankonline.testapp

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.piyankonline.testapp

com.piyankonline.testapp
1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4258

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.piyankonline.testapp/files/profileInstalled

Filesize
24B

MD5
19598d4427f1a4076deba9d6f4d86a10

SHA1
ac9221f9ef283efdb14b0c4c05fc7c9f9e8019c7

SHA256
a2facf31bf3eca64842150ef55ce40eed14e1d0a7c47384e696b2181bc085ebc

SHA512
d563863b7c1a15c7c13b2d4f737e2c56d33fb1a640bae7c7b2b09b853214b1efb353087efb7b244a505c1f6bf5ec614ef31b3bc8eab08fa022547505c19c6894

Download Submit
/data/data/com.piyankonline.testapp/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
511d82d069a2ef9e51659d07711d876e

SHA1
eefb77130d059404e278d8b7756fb2b3e2205669

SHA256
04a42e31824ba91f365379efddd10c8c404fc9201f08d2923edb04c97c3bd187

SHA512
0e5bdfdd78c396fbebfad1b849beb3a5ca7b51ab93c367523cc719a5ea5a86f9fbe88d8c26bb3fe052bf48658c63223b75057f7ba979d4f4c5986fa76be3893f

Download Submit
/data/misc/profiles/cur/0/com.piyankonline.testapp/primary.prof

Filesize
1KB

MD5
1e9bd14b0ace76d8273ffdb839c4c275

SHA1
aa43e7c4f92388b6cbb26f8a72c8c8fb62d6c710

SHA256
e901abb330bd58277c36b688cff5e42149b2cfe961dbd2f41166fbe570fc8c60

SHA512
cbffb2d704007f5529dbafa2ce4de6b8284183578aabb70dafa878ecf74bcbad6df2230bd632ff373d437781850d1ff5fd4b866f09d4128cf61126826fa50ef2

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads