Analysis
-
max time kernel
599s -
max time network
589s -
platform
android-10_x64 -
resource
android-x64-20240910-en -
resource tags
-
submitted
10-10-2024 12:59
General
-
Target
xManager.apk
-
Size
9.6MB
-
MD5
b6a14a183748d5c5ea8f332ad7704265
-
SHA1
fdefb5e5f4d2de0fa6fe8583376d23d6fd7f8f9c
-
SHA256
901eae37c506484e432c8dd3d96b8cc52063cca98dfc65e7318545d0ac90369c
-
SHA512
b1621f7e37e8dbd7a8f834a86eac24f4224ea29a69c414c20752316889c4ac85d2e341833a648d24ed03c9c452125917cee58d8b2a8674cb8dab256af8d897e5
-
SSDEEP
196608:pI3O/AEIo/pBp7GKwMVztF7MwVUVMaC8X2Pf33:pJ/86bx7Vz77Mwnw2Pf33
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 1 IoCs
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.xc3fff0e.xmanager1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9KB
MD52c84bc0c28d4ac333d267f7a152b4039
SHA149e67f04004587ae351d5aba4da5f18644746864
SHA2561eea5584eb2332554753b4beec7fe8e972bfb3eeadbe0c05dba33de267f25a00
SHA51244ab6c390cac8b11bf43097293ef73bb620b1466fd671a945639198ea10dea425a0c9443b47752cc0a6689a6f5a7661b35f7a8a350ffcba30a72be60d5f18abd
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
Filesize
156B
MD5c064af9c3111621a531c9aed816a83db
SHA1d9cf4c8500c328bf40dfd196b1eaec1e4dfab526
SHA25649f018e34ebf079675b1de71e802881bbd9971db7fa941fad1b12dd8abb604a9
SHA512dd0d303d6b7ad280ff22a0fc1626228f7686c39e37e85ec69dec232b00c56088fa855fc4e66b4cc93f411b243462322e4fd6513c666981659ad774be793af89d
-
Filesize
21KB
MD586ce3683020b3f28f4110aac9c769ff7
SHA1876e0686440524927639a4797b2f13b12a26ce4a
SHA256be852340e03b169a28811d1ff41582d19638d9fc0540f237ecb960c45bd07071
SHA51204d03a9963ba49adf5d0d26a21b57e85e21416fcc3d479ce7522149d45f5ab630ff78e590e724695fe29850b08b4dccfa5051daf5d4e4afd9384f7183f887ddc