29364114e19ed0018b7a9e1c812a3bc4bae1cda2f45ea25bd8760eb9ceba35c4

Analysis

max time kernel
21s
max time network
151s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
16/10/2024, 22:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
29364114e19ed0018b7a9e1c812a3bc4bae1cda2f45ea25bd8760eb9ceba35c4.apk
Size 4.3MB
Sample241016-2avprsweke
SHA256 29364114e19ed0018b7a9e1c812a3bc4bae1cda2f45ea25bd8760eb9ceba35c4
MD5 c3d2606f5aaccb6cb6af29927779ecd4
SHA1 d4d981b85fcab431fe41465e6428cf03133f0371
SHA512 8780059bd5305558cbf4c2a94d61de792c9749fca2d0b03b4425cd10b4fd2b5870e4bb9fa88dfdc97545b26bf0f9ae1c7a3d22541569d1a28ba64684fe3b7618
SSDEEP 98304:ayyis+d9mV+hE5KO9tIV1BrIEL3JrXWyJ6jeGMaKYPRclZotBN:ps+drh0DGMEL3J7WyJCGatH
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery persistence

Malware Config

Signatures

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.rhmsoft.codeundagLwpxtr

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.rhmsoft.codeundagLwpxtr

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.rhmsoft.codeundagLwpxtr

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.rhmsoft.codeundagLwpxtr

com.rhmsoft.codeundagLwpxtr
1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4222

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

20241016222321324.log

Path /data/data/com.rhmsoft.codeundagLwpxtr/logs/20241016222321324.log
Size 33KB
SHA256 6a87aabf46fe0b5aebb1b43f6750a6a4e0773d475afd5f91e6c1d3eccdb3259b
MD5 dff5d5963bf71354ba796c85a9246fdc
SHA1 5f189c56c026204344964dbfeccf828c63028fc2
SHA512 797d49357e01f802d24874ec719709f6405df79e5e426b369fb5894809cbddb3fe742add7bf85a2bc12cc03271be1cef689eb8ce5d91e7d4742fa57a2540d5b8
SSDEEP 768:Z1P6ziUOo0KyKZVAk3IwgmgN7V4g5tZQlTQXVQRAGzA9w1NDXDEnjD0HgXGFjPtj:Z1P6ziUOo0KyKZVAk3IwgmgN7V4gJUIK
MD5 SHA1 SHA512 SSDEEP

Submit Download

20241016222321342.log

Path /data/data/com.rhmsoft.codeundagLwpxtr/logs/20241016222321342.log
Size 20KB
SHA256 2a3db647fe35e8b5c8cfffed9e184242986bdf9f539ec3714b8ebfe8f97a120a
MD5 d2f197a21125a91342eb0b2300559442
SHA1 c4b9eb61f3a6632802184ea7b80ac3096bba7cef
SHA512 87b0fdaff61f533128144dc3f0ee8ae2d48aa1f7f857615dc1ba83cb37801457f7196e4426636d09acf0e0c2f43f4ea9a520cc6316a9e6c23998867654a266ed
SSDEEP 192:u+3NCoCkFXYFk62Ez7FmFG6PWD1TuLnl1G6OpD94DCy23nYWhOD7PZNhQh8iEpC7:u+3soCkFXW4ZnNJu
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb

Path /data/data/com.rhmsoft.codeundagLwpxtr/no_backup/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-journal

Path /data/data/com.rhmsoft.codeundagLwpxtr/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 fccacacda5b7618904330dc7dbe2a819b39eeacc4eb79ad0baff8e770ce8aae6
MD5 a1bdfa43fd6af28bec4978131f7a796c
SHA1 230c4d1c185fa33bafa74db8b33670e0803bce47
SHA512 bcc1b930eef30ad76851c452b7a1c15fd95dd4333df6f956a680926805ba53bd0702ae0441c34637aaa32433b22f774b9b06185a71a1786c18320210e65b5a3a
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.rhmsoft.codeundagLwpxtr/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.rhmsoft.codeundagLwpxtr/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 70e3193ba897c484655051ff337fa9dee7c5ac9eb61bbcc65312e32a291bfe85
MD5 5283d23a6d0e923ca7d110410610b8e2
SHA1 1c6c11c4bdc2023f4d9ffaf13a8e308a9cc5f93d
SHA512 9711687d32b78490cb4be741f1e88c2303ca4bd96e9928ee2e97d044e6ee853a3243de91e42757ec1a9447268708a74a338e2200b38dd7dd3214fd68e27688d4
SSDEEP 6:KW7R9ksRh9FZdrlOERX4PBX4ogLugMBX4suuK+/1Dgvv4+Ow2:KqfzdTRmBEyPbP/UvVOw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.rhmsoft.codeundagLwpxtr/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 c32e23da4b22202fe8222b2cafbbb24ed78b903d4eeebde6fd6b409568f7ff35
MD5 fd6006f88a266936fc1ab4efccf3d642
SHA1 735f3aa1af6a325e8ed52b0591aa9e393de8237f
SHA512 e328c891c91db4b7ae0abbb38ef618001da9aa84be564bdd482f2e8f8035acf3d84be4960a6812af480c16a44933dca84e33e357938e0ff2f76ea3fc573f7fb5
SSDEEP 48:u9Y66M/31pp8aEKeWrFhVtD/ymmumWAhrBlOymdGWOWKuWov6xl73JcXSMmchI9Q:k6+hdjnHtDRMpf8UzS6+BD8q0ExPH7i4
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads