Analysis

  • max time kernel
    19s
  • max time network
    152s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20240910-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
  • submitted
    17/10/2024, 06:05

General

  • Target
    MyBro.apk
  • Size 1.5MB
  • Sample241017-gs73laydln
  • SHA256 2f8faa2c03cea4ddf9112251a57a29a93aa2619ff7613b2dcf738a78d0c9f054
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.llq
    1⤵
    • Reads the content of the browser bookmarks.
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:4214

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ZIRCO

        • Path /data/data/com.llq/databases/ZIRCO
        • Size 24KB
        • SHA256 864f26a270cff3731c272c07550a42bcba2358696667c9d6f578a2f252d51a23
        • MD5 SHA1 SHA512 SSDEEP

        ZIRCO-journal

        • Path /data/data/com.llq/databases/ZIRCO-journal
        • Size 512B
        • SHA256 30cf1dc7529cc4969f174e1bd37b3d6b6b8063b60487552261149edd7c7122ef
        • MD5 SHA1 SHA512

        ZIRCO-wal

        • Path /data/data/com.llq/databases/ZIRCO-wal
        • Size 44KB
        • SHA256 b5f456ee8cbcb148b973acfbed9b8d9f0197e1f38fd429ea50cb709f7086e951
        • MD5 SHA1 SHA512 SSDEEP

        bookmarks.db-journal

        • Path /data/data/com.llq/databases/bookmarks.db-journal
        • Size 512B
        • SHA256 092e1f9226e13dd4506b5d29b88ff0627e91a6143b04186bed4abd9f73759abb
        • MD5 SHA1 SHA512

        bookmarks.db-wal

        • Path /data/data/com.llq/databases/bookmarks.db-wal
        • Size 32KB
        • SHA256 7430556723063ca9d2202244d3ef23365ba30c4697d01067ac9c018b4e9e6fe8
        • MD5 SHA1 SHA512 SSDEEP

        download.db-journal

        • Path /data/data/com.llq/databases/download.db-journal
        • Size 512B
        • SHA256 ea84fc26518fd50562abf0f9bc1ec223fc4625db789c182a398118c5c2b88428
        • MD5 SHA1 SHA512

        download.db-wal

        • Path /data/data/com.llq/databases/download.db-wal
        • Size 36KB
        • SHA256 164a07fb6c7d065dd2a43fb8e023d3b874e8663bcac3edc627004dc56543534f
        • MD5 SHA1 SHA512 SSDEEP

        weave.db

        • Path /data/data/com.llq/databases/weave.db
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512

        weave.db-journal

        • Path /data/data/com.llq/databases/weave.db-journal
        • Size 512B
        • SHA256 da2e0959f80d6041bd4628591d2c40fd9bcef1602b4710160ad30d8f4e9f5812
        • MD5 SHA1 SHA512

        weave.db-shm

        • Path /data/data/com.llq/databases/weave.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        weave.db-wal

        • Path /data/data/com.llq/databases/weave.db-wal
        • Size 32KB
        • SHA256 13a1da9a6d08a4ba035967d5546bfc0515f6795172039b3163cf253d568a1ee5
        • MD5 SHA1 SHA512 SSDEEP

        homepage.html

        • Path /data/data/com.llq/files/homepage.html
        • Size 2KB
        • SHA256 193e20d0dcd3b2e3a02bbead8a6581e09e7b3f7c6b7613ad28e3e65909f36c70
        • MD5 SHA1 SHA512