Analysis
- max time kernel
133s - max time network
149s - platform
android-9_x86 - resource
android-x86-arm-20240910-en - resource tags
arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system - submitted
14/10/2024, 07:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MhDAi2Ev6QKAITtYADT1dwwNYPE895.apk
Resource
android-33-x64-arm64-20240624-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
MhDAi2Ev6QKAITtYADT1dwwNYPE895.apk
Resource
android-x86-arm-20240910-en
5 signatures
150 seconds
General
- Target MhDAi2Ev6QKAITtYADT1dwwNYPE895.apk
- Size 3.3MB
- Sample241014-jpblbssbqg
- SHA256 097f7bd1c15471f5b427e13e609d148b8085069078adea97a21db5174e421d8f
- MD5 2569e1f8a6f8fa6006c1be829c4d7dd9
- SHA1 00cf412981461a7cabafae844533863334d3e313
- SHA512 18d50d634aa8f867f233db8f9c97610396c1dc2bc2347458002a1fdaa7b11acc2a5bde4e85f500f2c38fb2ef2b59ebb26fc2420b191ce63c7972ef9bb8729dd3
- SSDEEP 98304:1myoagJoT8Yf+3I3VXP33gRgqNS6GKEZvYfJZT:1kJrYf+3IB3gRVNTEZ0
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone wxp3906.jldy.h4a792kga - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver wxp3906.jldy.h4a792kga - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal wxp3906.jldy.h4a792kga - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo wxp3906.jldy.h4a792kga - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo wxp3906.jldy.h4a792kga