Analysis
-
max time kernel
59s -
max time network
132s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
08-08-2024 01:40
Behavioral task
behavioral1
Sample
9club.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
9club.apk
Resource
android-x64-20240624-en
General
-
Target
9club.apk
-
Size
36.1MB
-
MD5
c13f7bd53509d06a023d37d9473a3f1a
-
SHA1
a134cef3803b0a3b64a9287775e3e36e5d407fa5
-
SHA256
8a034f06f22af26c0efc7f6303034ec3405e1687c6c14cc4bf14b2631a045c03
-
SHA512
f5e366ff275448819adc19cffdea9a6593f13027e9343f5d3ddf41ec033961e27ccc3a203d23bb88e938124c8b174fb3c6a8bbfc61d49ef8de4517a9f50def5b
-
SSDEEP
786432:mLHvSBmxhAj85eOxJ8AEeP9uaTFTcPOT3jsdmnogtbEE+Ox4XOueWbjaZAfgClg+:6aSAvbFaGPCz4xDR6c3l3nRR
Malware Config
Signatures
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
com.companyname.x_9clubdescription ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.companyname.x_9club -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
com.companyname.x_9clubdescription ioc Process Framework service call android.app.IActivityManager.registerReceiver com.companyname.x_9club -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
com.companyname.x_9clubdescription ioc Process Framework API call javax.crypto.Cipher.doFinal com.companyname.x_9club -
Checks CPU information 2 TTPs 1 IoCs
Processes:
com.companyname.x_9clubdescription ioc Process File opened for read /proc/cpuinfo com.companyname.x_9club -
Checks memory information 2 TTPs 1 IoCs
Processes:
com.companyname.x_9clubdescription ioc Process File opened for read /proc/meminfo com.companyname.x_9club
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24B
MD54252954cd37c345c4cdf2c3d503f8ae5
SHA10edbce80a13f6edf84016b6661950ccd9e7ca97b
SHA2564472147d4e70bf9b9337b0305ba73016500be0e0e037343797ddc165ca6a4e6b
SHA512ac93620b3fca14301877c2916d239daac0601897015b9eded2d57efa47dc3e5c702354792c5339cf06272832b65f0c9fdfcb78d7f77032d269289068fe2cdb85