b0736f84e9781e4a99736668332195d211cf9538442218e5e53c373d3cfbb8e9

Resubmissions

02-09-2024 11:56

240902-n35tjszbml 10

02-09-2024 11:44

240902-nv6e4szakp 10

Analysis

max time kernel
7s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
02-09-2024 11:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0c9bb0ea6b43a394055b1ca02473b4ab.apk
Size

6.1MB
MD5

0c9bb0ea6b43a394055b1ca02473b4ab
SHA1

7b666659317b748f82de590a5a2bfedac822a75e
SHA256

b0736f84e9781e4a99736668332195d211cf9538442218e5e53c373d3cfbb8e9
SHA512

de2d02111444471be89bbed0149e57db627169971eae548a06d6f69dedf3290fd50206342e1b29eb207f1213717ac9ea5a4ce23d0a86a0c8e4497983fdc41f1a
SSDEEP

98304:4ZLhgufPim+3L2d73IslFauDrKppyVcLmmZrQYeZpKaoUE3EsrsT:4VfPVcL673IslF3IpyqLnZrQNZFoUn

Score

4^/10

persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.nowopen.cardiciciapply

com.nowopen.cardiciciapply
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4249

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads