ebf7e2064d5ea30c141dd52673f33074a5a35c6bda161f9406e0b5b31afa6d22

Analysis

max time kernel
13s
max time network
1355s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
25-08-2024 07:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

magis_mobile_v6.5.2.apk
Size

48.9MB
MD5

c4614c08c3be4ee9972870056d47afae
SHA1

e68156b531ffaade1090b7326b7ae7d604975cd0
SHA256

ebf7e2064d5ea30c141dd52673f33074a5a35c6bda161f9406e0b5b31afa6d22
SHA512

237381bcf0b3485a8f9cb0f5d4d018ea92c2c8d772db59676b1d6450fa58825309f00c2925922b3c7b240656bc7a086809ebc32ac8b548f29490e2e5b3df0e5c
SSDEEP

1572864:7rohglXys6OPl2eH4j6C9jitpKjlqCCjs2M:Howys6OPA2CAzKpJCja

Score

7^/10

evasion

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 1 IoCs

evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.product.model	com.android.mgandroid

Loads dropped Dex/Jar 1 TTPs 3 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
Anonymous-DexFile@0xcd1f8000-0xcda1fac8	4254	com.android.mgandroid
Anonymous-DexFile@0xcafe6000-0xcb3ff29c	4254	com.android.mgandroid
Anonymous-DexFile@0xcd153000-0xcd167840	4254	com.android.mgandroid

Checks the presence of a debugger
evasion

com.android.mgandroid
1⤵
- Checks Android system properties for emulator presence.
- Loads dropped Dex/Jar
PID:4254

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.android.mgandroid/files/if563566742c2d30b

Filesize
12.3MB

MD5
4f8d901f2116e28367570376189ceff9

SHA1
d0223df1c963d3590f99064544975704b6bdbc59

SHA256
cd1572bd1969374ecd2140b3c4aba2c1ad2c9d54536b67a83822c70ac5013332

SHA512
463b175bf7d724c6ea2ccfbe8daf5e15ff155657c595d19b3344a7cd8e4926332a8d7700f488f6400468567f264fc63f77a4af714c3c97480c495218b4a24a08

Download Submit
/data/data/com.android.mgandroid/files/libexec.so

Filesize
522KB

MD5
7636300c06bce717fd788f2fe6feef39

SHA1
cea7ec57f85331d548485c928b06bb8013c5fba1

SHA256
b0ab74c381526f282bcafc664b0125a0e34d7fd081200c1b19d649f34ea66546

SHA512
3e80a3927b148202e885cc30c8314afd4aae8953a6825c08d813c555a144125ab8a036f591b027c82c438d4b888e770d96200516b9eac61913d05967598d1144

Download Submit
/data/data/com.android.mgandroid/files/libexecmain.so

Filesize
9KB

MD5
217462abc75e03bb4812617378c03aa2

SHA1
259cc7db714fc592f521062c21146a1618d92a13

SHA256
c5646139fbbff362faefa378dfb204607fcf0c8c490d36c88d53395d16d1f5d6

SHA512
b12b703e15bf2374a43d1273ee0431b26782dd970810dda55fab724968de518aa0eb5320b5e391a1f6e47d4e520d1aaebcf20784a6f6a1934bb84a66cacffc48

Download Submit
/data/data/com.android.mgandroid/files/libijmDataEncryption.so

Filesize
446KB

MD5
72b29ca122fa57c30ff2aaf6fcaaf191

SHA1
285dca283cea43f908c6cda623d036c82dbbac25

SHA256
0e494c2a848447b9f308c89dcf1d56c85b115c189d6475fa99e4ca207e413dbb

SHA512
3b0db1ebbaeda870a8c7ba1201f140e8bb91c45068009523b1470173faca94ac60d6fb4ea895e9f04df265df8048e5e5a7d60cf52aa206e5d5269d237a1274b2

Download Submit
/data/data/com.android.mgandroid/no_backup/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.android.mgandroid/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
00c1d4b39c3cea15dbca1d0da9e4b97a

SHA1
ba169a502aea85f62f8cb39d92308d42e922b68e

SHA256
1549d73b2b999f7582f7d8ccc3dbea7dc50c7ea7860e61ece6d04b8c82759be0

SHA512
1f4089d809c4bb58057d0c3a0dcda9fdc91af4f43ee9f779813b121d3a59e9a37c9c98d88492fbff6edd2b999f71a883b9d47879cb865365114f36d72e222ef5

Download Submit
/data/data/com.android.mgandroid/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.android.mgandroid/no_backup/androidx.work.workdb-wal

Filesize
112KB

MD5
c76ac311749154de5a479cae6136c03f

SHA1
b3d7ca36197d7786b265aa3ae912512da5feda19

SHA256
6bc5c29932d82adf4eaba7d837016f2af6e5acb18a47448543045605e76ab073

SHA512
ef46fd4d2fda6bec3dd6e6ff6d00fcd4d1b4c1184bee2a8166f5c3585e8833bd507bf2ac92d0d2c694aa2b74512ab31895ad6ce5b64622aa0754cdb81a7cc5ce

Download Submit
/data/data/com.android.mgandroid/no_backup/androidx.work.workdb-wal

Filesize
120KB

MD5
3df2cba7ac94578848a2ea9f0a07db4a

SHA1
4a056c28bd6abebb7ed9aa5463226c6985752d8d

SHA256
40f83a055beebba9cecb9a5e06bea82b93e457e56592cadbc31ed69bcff90313

SHA512
3604e18908e127c51d790e95cb75ec1da3f3e14c58a8810fdeb52072a11c170e0a22c5120b7f7721ffa0b097988ff13d216f62b90db4f7f09923dfe74f358a2c

Download Submit
/data/data/com.android.mgandroid/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
46f348fd09da591a2baa744a33b06913

SHA1
df3692e8f8b4a17a82aff64aea6ac24ab22c1ed6

SHA256
16d17eb61abd01d6856a718650cd7a662adb55530743dd572b0772f72f2882c9

SHA512
d4770bdfce888f91fd49b3f37592d889f0b081a82e4fb3ee1db2a9b7b0786ba8fc1a035a1756be9054c18223f50444ffa4d84562a8b9361bafbc9fb9eec3c0dc

Download Submit
Anonymous-DexFile@0xcafe6000-0xcb3ff29c

Filesize
4.1MB

MD5
2da326fffd51c260a43e8e44dc6ef615

SHA1
7512a70c523416c6dcd2d03e5c992d6b516b0014

SHA256
459b1273f8837812863e1b5c49affea4fcb7d24c6f329b9d0e99f5fdcd8559c8

SHA512
f604f6b3e6aeab5ba73cabc8e723deddfbfbb2cc4e47446bf53651c154f0fd337b95f73a2724dc361863e1c57268b409770395c0ae0044266facd3da075dc532

Download Submit
Anonymous-DexFile@0xcd153000-0xcd167840

Filesize
82KB

MD5
91cfcd0ce94aa4bdd5e4c72e248adc44

SHA1
7f2cc2cd1d4e49796a3dc81fc0d7570a754f97ee

SHA256
5c04eacf40f5430781951166732aac9d6c595b2f4c1e1990be4b3dcdf1099d8a

SHA512
2e1921a7d40b93065cc1f65b38eb7b307248eb2d7b075d5cde1ac3876a4700a676f3620960a7a0ae7f09515f86e93043034c2803647b347675cc91e9b909a25f

Download Submit
Anonymous-DexFile@0xcd1f8000-0xcda1fac8

Filesize
8.2MB

MD5
bfb56ae2be41feb809ba8e196de52394

SHA1
46533611df95ab99936c60ce788c535e10562f1d

SHA256
42207e028872dd4e282232a8474fd4dedaddf996077f6da57f6a9d68b299ae1f

SHA512
3a9efd4cebb68c221641e031b5e24d33aaca41c7242521a0d758eb09214f96be92dbab60cc1f849fb20a7fb34f7b7c75078194b8dd79f1b59acbb233df2f0a36

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads