Analysis
-
max time kernel
13s -
max time network
136s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
11-08-2024 05:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
EXOBOX_v3.3_1.19.81_Support.apk
Resource
android-x86-arm-20240624-en
android-9-x86
3 signatures
150 seconds
General
-
Target
EXOBOX_v3.3_1.19.81_Support.apk
-
Size
9.3MB
-
MD5
c30a25752c808b1589eb4c5919fc35ae
-
SHA1
cf7bd3a239b2562af4b9c3a0bfbce276b1b7db89
-
SHA256
7409d59c6702a38a4459f35682b72ddef67210ee69d1abbf0e808318216a5cf3
-
SHA512
59b093b00d84550e6ea761f3f9d2222e18c2d6d48a520fbffb3c4c45e74c93f15ef80ee13a3e21ebb8f702359881f0e196892143a3ef15e8385acb24e786e475
-
SSDEEP
196608:m4uD4Bvinq8bPQrob0dtOpt41MqrZs4UmWf+BDOaX/aRhHBLEbf+dksIsbYd:Yq8bfodgb4iqrZW+ByaX/aRhHBLEbGdC
Score
4/10
Malware Config
Signatures
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver io.mrarm.mctoolbox -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal io.mrarm.mctoolbox -
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo io.mrarm.mctoolbox