Overview

overview

10

Static

static

10

67530f6cc3...9a.apk

android-9-x86

6

67530f6cc3...9a.apk

android-10-x64

7

67530f6cc3...9a.apk

android-11-x64

7

Analysis

  • max time kernel
    68s
  • max time network
    77s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    30-07-2024 14:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    67530f6cc30ac3dc55717a8ff276b588acbd8849fbd79e821bca9727c20c249a.apk

  • Size

    1.9MB

  • MD5

    2191424ce72d4b1bbe55fa317b44eee2

  • SHA1

    a57d8f915bed09fcf56b7f431117a4642b56fdb5

  • SHA256

    67530f6cc30ac3dc55717a8ff276b588acbd8849fbd79e821bca9727c20c249a

  • SHA512

    0c0e0370012486e43c5fa1692a0c95532dcef7ee5310ebf1e842b3b3d6d6fbaa5547650061b7943de5abb327db23282110a98e34022af737527da4575e912c05

  • SSDEEP

    49152:MXF3Ow1l/vjd3bwCCEUwYIhyt/8hxKNR8xYAk/ISYVvj/45M47jjU:MXFewPvjdrw7EULIi/6K8uv6juM4Xw

Score
6/10
discoveryevasionpersistence

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
    discovery
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • market.nobitex.jibitex
    1⤵
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:4245
    • /system/bin/sh /system/bin/settings put global sms_outgoing_check_max_count 99999
      2⤵
        PID:4383
        • cmd settings put global sms_outgoing_check_max_count 99999
          3⤵
            PID:4441
        • /system/bin/sh /system/bin/settings put global sms_outgoing_check_interval_ms 99999
          2⤵
            PID:4461
            • cmd settings put global sms_outgoing_check_interval_ms 99999
              3⤵
                PID:4519

          Network

          MITRE ATT&CK Mobile v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/market.nobitex.jibitex/cache/~test.test
            Filesize

            4B

            MD5

            098f6bcd4621d373cade4e832627b4f6

            SHA1

            a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

            SHA256

            9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

            SHA512

            ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

            Download Submit