e014b548d3225a6972ea67218a6ef51d2d36f03050244bb4f2c7201464497857

Analysis

max time kernel
97s
max time network
147s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
01/08/2024, 11:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ee39dd26b83a016f3c3e3b095ff15e88.apk
Size

5.3MB
MD5

ee39dd26b83a016f3c3e3b095ff15e88
SHA1

a6ec0acddacbc3e339bd0fbaa2d7a92831d95a93
SHA256

e014b548d3225a6972ea67218a6ef51d2d36f03050244bb4f2c7201464497857
SHA512

acd8e82e9d2c4462775a2eef2d3998aebaa1d91c7cc8ccba2e09800e6d9854a8bfa24868cc385577a9591f3a39256de7c3807643b78a3e1f9879c9add4e27a0e
SSDEEP

98304:3X6vH0fpdsCl039pnVVuzpVMAPHS8rf/O+T1LUTk6+Iufpl921ZZR1oTwr5xpiLB:6vH0fpstpnVMVMAPHZhpLMk6LO2dTpg

Score

6^/10

discovery persistence

Malware Config

Signatures

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.example.shineinterview

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.example.shineinterview

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.example.shineinterview

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.example.shineinterview

com.example.shineinterview
1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4245

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.example.shineinterview/files/profileInstalled

Filesize
24B

MD5
ff8ac28d95eb4fba6cb968429f237691

SHA1
15093e485472ac27dc628ae5ab743316190ee07f

SHA256
c30691c27722724a1b2d74dc8873fe9092f5a849ab0644d288e284b22c5ac800

SHA512
f4e2bcd3b77f5394b71d096db6e65ed1dcd90c72a4ca6ac4e3dda9cb3c82de48558e6c83eb1d4cb980f274576d0f3583136c7dc32f27000128a0a3d33040096b

Download Submit
/data/data/com.example.shineinterview/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
63063fcf98327197641a9dbe98fd8b0d

SHA1
cd3c46383f22bd10f0ef99fe247113e2ef6c070e

SHA256
fa413f8e57c1ca36d9dd4c65c5a39d6ee937ff73964c13b54d1bd18f1a14bc64

SHA512
9b0c35928b77eee8d6ce924345f3c336f4d8d999863c87c3bd84b18fba3bca3d2118cd30d5129410e2a57f1081d55b3460740295e404cf8c0b178ea9a714d798

Download Submit
/data/misc/profiles/cur/0/com.example.shineinterview/primary.prof

Filesize
1KB

MD5
a9c5111aad72022a092dcf2436762c8d

SHA1
26a467b78bc11a467f4606a31e6b3fc2ea72f0cb

SHA256
dc7cb49f8558b6696e2d2a8bf432ae36735e2aaebc0697f3745d97edb6e42a76

SHA512
d86a5a4b4d30f148b6c115d7ff192e796a91a228a8f9314fca355a558feaff343eb55bd5265cf543ab61f0aba5d0352fc9d6ff2d38aca1592075855167919d33

Download Submit
/data/misc/profiles/cur/0/com.example.shineinterview/primary.prof

Filesize
3KB

MD5
f292162ef640fc8d4520fc25aadf4ce7

SHA1
48e0671f40f468e8f52d54dcf4ffe7a491b9a06c

SHA256
1de47cb191b2ecde12dad41271c6af66e02e0f174ad4d6a6ddb985179024e804

SHA512
40342ede3a974ee001a8fde3622c819cd9be5f85bd223f752976b511cc3e7d733317e4a4a498a0308a7bf2d027921c0f5e076cebb376b537bf9665bf41ca51ab

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads