1c8cddbf80b943ad3309bb7cc065208d6bd249cd91a4aa9ced4b58f5b3d0cf3d

Analysis

max time kernel
179s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
28-08-2024 22:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1c8cddbf80b943ad3309bb7cc065208d6bd249cd91a4aa9ced4b58f5b3d0cf3d.apk
Size

3.6MB
MD5

b3b2613e023572336a06ed783673440f
SHA1

9b8c1fa3f2f42f1dc82128be66b4aef86a9f1a2a
SHA256

1c8cddbf80b943ad3309bb7cc065208d6bd249cd91a4aa9ced4b58f5b3d0cf3d
SHA512

8c322a53e0a3a33b801fd93d6d7a8813ce8f8427da9a16dbb636ed400b71692e2a6a9f53e959ca392e939ffe9227f4718222616999319445c63ab218c6554cbb
SSDEEP

98304:yjrsEgb26OE2Io5crog9wEl1OadvPXw5ZW:8QOE2Io5c0gJl17vPXwTW

Score

6^/10

discovery evasion persistence

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	cbsdv.ksdewfwegb.fffff

Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs

evasion

User Evasion

T1628.002

description	ioc	Process
Intent action	android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS	cbsdv.ksdewfwegb.fffff

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	cbsdv.ksdewfwegb.fffff

cbsdv.ksdewfwegb.fffff
1⤵
- Queries information about active data network
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4247

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

User Evasion

T1628.002

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/cbsdv.ksdewfwegb.fffff/files/mmkv/mmkv.default

Filesize
4KB

MD5
620f0b67a91f7f74151bc5be745b7110

SHA1
1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d

SHA256
ad7facb2586fc6e966c004d7d1d16b024f5805ff7cb47c7a85dabd8b48892ca7

SHA512
2d23913d3759ef01704a86b4bee3ac8a29002313ecc98a7424425a78170f219577822fd77e4ae96313547696ad7d5949b58e12d5063ef2ee063b595740a3a12d

Download Submit
/data/data/cbsdv.ksdewfwegb.fffff/no_backup/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/cbsdv.ksdewfwegb.fffff/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
527c3c54873856964638e4f40b40e287

SHA1
05f8035ba667ba1a9a5791e07eaea5db85d08ef0

SHA256
90124c7eaf605d20ca83daaced3838b925c1f5e5eb53b74d58836ccfda183284

SHA512
8313f1697a69c5494743113f5e7146efa553d18ea5fab2763ccf75adc1f515892242d15e1b0a4706252c5fe01a91680b43532b83e5fa5ff3e71ce2340c0ac2bd

Download Submit
/data/data/cbsdv.ksdewfwegb.fffff/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/cbsdv.ksdewfwegb.fffff/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
9031ac977f0a24c9c4bca0e2cabe5ecd

SHA1
bbe3a2ee69ea0a7909f9cc99be03a36cfa327c1f

SHA256
2f7cfbad86a72ba05103967938c9a59d283dbb5de62a28095b942484c4b19a83

SHA512
b32b25f7cc2a02d4df8e03bca4b35e7696aa80081e033896751c6db7dd1b9db2eee8514f0720234ec89f2932385cb70987ec41155c6b445d402b44d1a0bf3c72

Download Submit
/data/data/cbsdv.ksdewfwegb.fffff/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
1eb8b3c4630a5d018be54f5cbd412485

SHA1
e840e20052c865fa14992664e4519c5eea5dbde5

SHA256
9d9f763a49fcfa296832f9a279f4bbe8e23600c1bc8560b2adc25b81e7b8f1ae

SHA512
1e63a03eb5f2dde1b7ab3278289218b780b7c3da3991f20f3b78e6e5c0626ffdddb99fe13147faf4edcda043a6ca61c04ba0aa1019b1a0a577707f6a00fd8b30

Download Submit