Analysis

  • max time kernel
    18s
  • max time network
    137s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    20/10/2024, 03:30

General

  • Target
    Superuser.apk
  • Size 823KB
  • Sample241020-d2p2laycpk
  • SHA256 8135f47bab91a26adfd563ed4dd22e25f454dfae02a076b6f3cd05604f2068a8
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.noshufou.android.su
    1⤵
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:4210

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        su.db

        • Path /data/data/com.noshufou.android.su/databases/su.db
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512

        su.db-journal

        • Path /data/data/com.noshufou.android.su/databases/su.db-journal
        • Size 512B
        • SHA256 8a92427d7b7b0440eed157f495b1ce998dd593171d41efdf7620dfdda43a18be
        • MD5 SHA1 SHA512

        su.db-shm

        • Path /data/data/com.noshufou.android.su/databases/su.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        su.db-wal

        • Path /data/data/com.noshufou.android.su/databases/su.db-wal
        • Size 40KB
        • SHA256 16e7d48426819a7cfda5b968724a2ba6618aba0d05674ca511dc0375bd6010fd
        • MD5 SHA1 SHA512 SSDEEP