Analysis
-
max time kernel
46s -
max time network
134s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
08-08-2024 03:59
Behavioral task
behavioral1
Sample
com.companyname.x_9club-Signed.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
com.companyname.x_9club-Signed.apk
Resource
android-x64-20240624-en
General
-
Target
com.companyname.x_9club-Signed.apk
-
Size
65.5MB
-
MD5
aa106a967f142a70556a32866c54aae2
-
SHA1
bcf48a1e836d68aa55797ed327df2c0d0144a948
-
SHA256
7b14ad5c5cb0fc9672bd0989feb09c9331b6be674d210e6088b6b4fa863e0473
-
SHA512
384862b71a2bca7fbe9832ee478cf9a61a920f51d8debd939f7b557b75bf9266df6149c86e709184246fb8ba4c7dd8ccb0bee9c31b653dd07513474a7466ad57
-
SSDEEP
1572864:JIfA141y6mPCM2zDFOu74Adr2pO1lHfkqDGKObXLnWGOBGYc3l3nIg:+nk6h5zBOu74Adr2U/mKGnBOYH3nx
Malware Config
Signatures
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
com.companyname.x_9clubdescription ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.companyname.x_9club -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
com.companyname.x_9clubdescription ioc Process Framework service call android.app.IActivityManager.registerReceiver com.companyname.x_9club -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
com.companyname.x_9clubdescription ioc Process Framework API call javax.crypto.Cipher.doFinal com.companyname.x_9club -
Checks CPU information 2 TTPs 1 IoCs
Processes:
com.companyname.x_9clubdescription ioc Process File opened for read /proc/cpuinfo com.companyname.x_9club -
Checks memory information 2 TTPs 1 IoCs
Processes:
com.companyname.x_9clubdescription ioc Process File opened for read /proc/meminfo com.companyname.x_9club
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24B
MD5f16c6e7b21a58b2ca0e16a89143369d4
SHA1f869a115882e68d8ffb9692247a28d2e96013d58
SHA256f8932f3289d483696d268c155bf1f3fcf1d7c9ed967121d1f28a451ad80d946a
SHA51252d0138006bcb8068ce4ae6dba4adf6ddf7a7e7d35c73d94c4adf8c38c2987ba5dc769d1b6bffe9d1c44f43873413e7b4805e6f7b4b1d984871633b4f85a5ae0