Analysis

  • max time kernel
    899s
  • max time network
    744s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20240910-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
  • submitted
    10-10-2024 12:59

General

  • Target

    xManager.apk

  • Size

    9.6MB

  • MD5

    b6a14a183748d5c5ea8f332ad7704265

  • SHA1

    fdefb5e5f4d2de0fa6fe8583376d23d6fd7f8f9c

  • SHA256

    901eae37c506484e432c8dd3d96b8cc52063cca98dfc65e7318545d0ac90369c

  • SHA512

    b1621f7e37e8dbd7a8f834a86eac24f4224ea29a69c414c20752316889c4ac85d2e341833a648d24ed03c9c452125917cee58d8b2a8674cb8dab256af8d897e5

  • SSDEEP

    196608:pI3O/AEIo/pBp7GKwMVztF7MwVUVMaC8X2Pf33:pJ/86bx7Vz77Mwnw2Pf33

Malware Config

Signatures

Processes

  • com.xc3fff0e.xmanager
    1⤵
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4333

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.xc3fff0e.xmanager/cache/1613498354782.jar

    Filesize

    9KB

    MD5

    2c84bc0c28d4ac333d267f7a152b4039

    SHA1

    49e67f04004587ae351d5aba4da5f18644746864

    SHA256

    1eea5584eb2332554753b4beec7fe8e972bfb3eeadbe0c05dba33de267f25a00

    SHA512

    44ab6c390cac8b11bf43097293ef73bb620b1466fd671a945639198ea10dea425a0c9443b47752cc0a6689a6f5a7661b35f7a8a350ffcba30a72be60d5f18abd

  • /data/data/com.xc3fff0e.xmanager/cache/image_manager_disk_cache/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56