Analysis
-
max time kernel
179s -
max time network
137s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
30-07-2024 01:51
General
-
Target
67530f6cc30ac3dc55717a8ff276b588acbd8849fbd79e821bca9727c20c249a.apk
-
Size
1.9MB
-
MD5
2191424ce72d4b1bbe55fa317b44eee2
-
SHA1
a57d8f915bed09fcf56b7f431117a4642b56fdb5
-
SHA256
67530f6cc30ac3dc55717a8ff276b588acbd8849fbd79e821bca9727c20c249a
-
SHA512
0c0e0370012486e43c5fa1692a0c95532dcef7ee5310ebf1e842b3b3d6d6fbaa5547650061b7943de5abb327db23282110a98e34022af737527da4575e912c05
-
SSDEEP
49152:MXF3Ow1l/vjd3bwCCEUwYIhyt/8hxKNR8xYAk/ISYVvj/45M47jjU:MXFewPvjdrw7EULIi/6K8uv6juM4Xw
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
market.nobitex.jibitex1⤵
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
-
/system/bin/sh /system/bin/settings put global sms_outgoing_check_interval_ms 999992⤵
-
cmd settings put global sms_outgoing_check_interval_ms 999993⤵
-
-
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff