543b96a0366f93412cb7914090f476f0085134fb990bf9c0262a0c86953ab18f

Analysis

max time kernel
21s
max time network
138s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
16/10/2024, 22:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
543b96a0366f93412cb7914090f476f0085134fb990bf9c0262a0c86953ab18f.apk
Size 4.5MB
Sample241016-2fxfjswgrf
SHA256 543b96a0366f93412cb7914090f476f0085134fb990bf9c0262a0c86953ab18f
MD5 373678c06a923019a2ced0d704fdff5d
SHA1 d040fe5f076430e98cd6d2b04663199cf5d3dc67
SHA512 a7012bc5c2afa347d4d3c71501ee8b84712a3c0f3bef576a4d1f2b897fbfeb63f71c675affe9ce2c6daa49f8fe2b5d578ee769f3e7718010aeb102f18fa38113
SSDEEP 98304:NcXrgLOSUb39U0/FlUJDTvOcOR1SHpe9cpjI3qWfrSp2:yOMb39U0/FU/OzqYaA5ru2
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery persistence

Malware Config

Signatures

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.rhmsoft.codeund9013

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.rhmsoft.codeund9013

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.rhmsoft.codeund9013

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.rhmsoft.codeund9013

com.rhmsoft.codeund9013
1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4208

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

20241016223213565.log

Path /data/data/com.rhmsoft.codeund9013/logs/20241016223213565.log
Size 33KB
SHA256 52a36ac0a3ce70eb812faa0c32fe4d9594a6e033d62712b071d67aa19873807c
MD5 709f69f52cf1e645086b64b9bedb0d03
SHA1 8f9d6f5fb0dbbd30bc7e67915c04546a20dae78b
SHA512 10a95a408389a2f2b0a8ea7611642f2e497c6d4fbb1a5eb8355319bed7233d7e05dfecdac485ec7ae178a71fb738b3a975319880eacab0d5a164e73a5e12e259
SSDEEP 768:vloFqMKWj6hy/qn0E3gwbTwpG1YHjF4maTDQnE7JPkL/08m0Odw9A3xLv2FyHd/w:vloFqMKWj6hy/qn0E3gwbTwpG1YHjF4m
MD5 SHA1 SHA512 SSDEEP

Submit Download

20241016223213566.log

Path /data/data/com.rhmsoft.codeund9013/logs/20241016223213566.log
Size 20KB
SHA256 e1339d18253ccb46be5926128bc79cdd3c3ffca4a40f1e81fa460f2f437a4836
MD5 ec5f7fc7361eec476ec901df6a8bb841
SHA1 d6072058d0af4d034a7504bd3c015bcb0fcbdade
SHA512 4b562e1ed3f7b690957cf52b16395a2bc812f434725d19809a66280b3674589dabe11771c65ee7c72b1b691e9895c0c3cab8634119daffa9c1df6694ba2d165e
SSDEEP 192:X3dNUP7sMmU+UwFjVwAwQix03+KlDaC6zHPKoXWDagDashbjmeyDH2q5kNTCpEmH:X3Cr+quQwpOrJQL39FSfb
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb

Path /data/data/com.rhmsoft.codeund9013/no_backup/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-journal

Path /data/data/com.rhmsoft.codeund9013/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 ec7141c009da0562e635e5aa555d70140a0fd9b37390ddfea7d8b959cf599def
MD5 e1a221896e6fdcd0a94d3ef369699382
SHA1 86c8eb83f8297afca02a16266b6c7bd1577fc27d
SHA512 c24e390d4ebbb1eee45b3a4c084f43d396afae18445361559ba88ba5994e6b4d23b9b91a6e085e94c27769e3013ca31f525cbf443fd94502a1d0f06d09c5dd02
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.rhmsoft.codeund9013/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.rhmsoft.codeund9013/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 387ba3a9556a442f03bc62323a953553fb3baa00132f8c0237578a5253c73bbb
MD5 a12642bd73b83088c7f7dcf1003c8d62
SHA1 a7cf7d61d44fa93f50f72a402fe72c7c217d0948
SHA512 b237e0e27d4afc87a5564aefb2832fa882c14b540aa293b5cda2feceb353c1a811964668eaa028dfa16d1b5dcfb5eb357a758647586368d44fe4b25392cdc707
SSDEEP 6:KurJuWJWi0o9FZdrlOERX4PBX4ogLugMBX4suuK+/cJmaKiQ0V8XOw2:KGJE0zdTRmBEyPbP/cLKZXXOw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.rhmsoft.codeund9013/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 2e39a2f4ee25187c899072754b527b22f1245c89efc44b740207233b09f00f5b
MD5 3c996d59af3b01ffc98bbff0ed640221
SHA1 58d38bf2883ec0dc4f13b084ae1dd5128d9f52fc
SHA512 94dc239247e93a66a067cd8d863c1455ead8ccc7c4532b0320eb7eeda9e2712e13fceb12d0996b45e064d7b8d10fa9c7b237467c9e9a303099c9661d23fd0da6
SSDEEP 96:1Q6+hdjnHtDRMpf8UzS6+BD8q0ExPK6Glu:1UdjnHt9Mpf8UzS6+BD8q0E5BGlu
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads