Analysis
-
max time kernel
149s -
max time network
157s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
27/09/2024, 15:48
General
-
Target
Instagramsrc.apk
-
Size
5.5MB
-
MD5
74aad7d19cb878a536ef6522f53f337b
-
SHA1
80aa95eb50058ce57c6466714c717f160df28093
-
SHA256
fa90312f50c7a4f961ac8f802ee2e2cf3d559f0c38ea65cc1f03f8d830265472
-
SHA512
89db44002c960a38e9e0853cae9073212c1e106aba26017dd2f15d4029814bed49710f1c322e66a2dee9c6bf0bab3d7309ed2cf11fe71e1c76f885047c7b8eb1
-
SSDEEP
98304:NwubXW62AALy6GqYZpcQb788aGg82Qr9pzbuV7zphCIJaL31C8UofrFF3NP6a:NrXZJ6nicQHNaf8/IXrJaD1T3V6a
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 9 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Requests accessing notifications (often used to intercept notifications before users become aware). 1 TTPs 1 IoCs
-
Requests enabling of the accessibility settings. 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
sigma.male1⤵
- Checks if the Android device is rooted.
- Makes use of the framework's foreground persistence service
- Queries the mobile country code (MCC)
- Requests accessing notifications (often used to intercept notifications before users become aware).
- Requests enabling of the accessibility settings.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
MD5d14bb9aeffbf86dc2fb02fdd5903ea32
SHA17647e90f6521f714c541e6198e0d16328ef0ac24
SHA256bfa556735908a0f3c983dd48e29b7f18fabb87fea38937e8c2d773a02dc24719
SHA5120f4b6ef18dcb32edccc156beb117ed8d00e3ca38e028ecb6905dcb70542a7ac022dcec4c0b9ac469f8fcec23039f02676e791536b2bdb4fa5e3f80b71a63ba93
-
Filesize
19B
MD56e0075dcc0b7ac222bea767743b61a33
SHA144b3eaebc17568ca6e120747fef61521137068d9
SHA256d0d1b610858419980e61586967769ed1bf001756aacbd5e00518b3b0eb83a402
SHA5129950d09e464f74889ae85d70e72e57197b8a2713518bb7901b2c7b6e1ae51dc7e53547b2865f0226bfcc3bd5ea530453298512f8ecbc7b790da3339b5e05cf42
-
Filesize
8B
MD5d452e81257a1a187e93cd174fdd27ea5
SHA1ef14fc654b2a7060f948f7d85e3ffd0bd6bacdae
SHA2564bf9253a7e8f3b908a7b4217d98e9a30159d7df1dfee9471584246f1160641da
SHA512c8c86eaa06f8ad661365cd345e11d73d96967891693dce1f4162d090ac90f4de19968860bbd8c1a9a2a4fd55c418e03462fed07bfdeaccf4ded9ab83f06d3571