f53a8790749851ffdedbfb86be2eed965ebf808eeffed6a34699c8dc61d1a990

Analysis

max time kernel
25s
max time network
151s
platform
android-9_x86
resource
android-x86-arm-20240910-en
resource tags

arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
submitted
05/09/2024, 22:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f53a8790749851ffdedbfb86be2eed965ebf808eeffed6a34699c8dc61d1a990.apk
Size

4.2MB
MD5

c286542fb731c09be5a9b84aabddcac8
SHA1

baafe85688f15229581ddd7f858beab795efba4e
SHA256

f53a8790749851ffdedbfb86be2eed965ebf808eeffed6a34699c8dc61d1a990
SHA512

e7d7924c1a4be171047eca41d495cf2443019baf675815afdcf569b9e18dcae3278467a6d2b1b8b2d0d0eaca15dd0bded4549a24564ddb256e68430f49d3c545
SSDEEP

98304:NYbnUEUdh2BE4+4/YS2ZXTs17BNQ8AUvMdJM/o/KrT/dZEjy:q7khb4H/UQ7BNQ5Uv4MBdum

Score

6^/10

discovery persistence

Malware Config

Signatures

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.gurujifinder.mjpro

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.gurujifinder.mjpro

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.gurujifinder.mjpro

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.gurujifinder.mjpro

com.gurujifinder.mjpro
1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4218

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.gurujifinder.mjpro/files/profileInstalled

Filesize
24B

MD5
6030871540255c9f7c66fec9bb525458

SHA1
4f3e4ad723872ec32bbff968b1fe66dfc52c23d4

SHA256
3868956d1ede59cdfa01c4eb100d55436da2e920e0317a48fcc3d51bc34cf4f3

SHA512
95e41689e44b2232c68b3652ce2485a2c57900c9513dc1d086f7d2334a958a8022119fd854ee2584331b42d445cb73faa3744be3f11a2974e5ccffe0d2201c41

Download Submit
/data/data/com.gurujifinder.mjpro/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
d1be9689fb03e32707bc9876717532e1

SHA1
84148572ebb310866cf23de1ed7786858992bee3

SHA256
825fc57b4ff5f7662f08eae0eb77d4ad5787299c609d58783fe5c3f04680594b

SHA512
4934343bf525a921eab3ee533b9b75c282cffeb446f06102927d6b6872ed4e832c5dae271a33ef1de022bb6e5a840c15e926e47ecd7fdbf3fe69b8cb41283df2

Download Submit
/data/misc/profiles/cur/0/com.gurujifinder.mjpro/primary.prof

Filesize
1KB

MD5
e3037459444c52551db7b9ebcb524ba7

SHA1
5b15f6546ea18902e62d59fb63d929441e631076

SHA256
a70cf57d5b806330335b935db461034bcc7aecb3f93e66c2c172140c74b13448

SHA512
bad40fa01e49415e6c240f2b66e85e2e39b4ffd80ad9e1a6c46f028ef114282dc5c226efb4b2987544bc73ed43c2a46bd1c6215d7f0a6a9eaafe7a196781ddc7

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads