d305da75f52d66605ff9c4bb93ffc6dc9fb8ca4734af8c46adcb2c8e7c0ee824

Analysis

max time kernel
3s
max time network
143s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
08/11/2024, 22:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
d305da75f52d66605ff9c4bb93ffc6dc9fb8ca4734af8c46adcb2c8e7c0ee824.apk
Size 4.6MB
Sample241108-2qvpps1gla
SHA256 d305da75f52d66605ff9c4bb93ffc6dc9fb8ca4734af8c46adcb2c8e7c0ee824
MD5 9f9573abad69578d25f71835f8be5bd6
SHA1 74a19eebf83bb813eb246d19a8822d5ba05b3ec0
SHA512 8bc7df1ec56467519c37dd3bc64efbc1dd82abe46fa33eda578c0ff2ab18cfa8824f61f8d967a09f0ab7068617aa4084249bdd34da31d363d61d9bd09fb94165
SSDEEP 98304:wFYvWVi5sAgK3pUvbsRFexMgD2dClC121I6ajUGzfrtELrvHUA2pF5wvgkH6:w2vB3GbsRFexXyV1wCUHLrXMwvda
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

banker discovery evasion persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	ru.btkuvhuv.auwbbbrjo
/system/xbin/su	ru.btkuvhuv.auwbbbrjo

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	ru.btkuvhuv.auwbbbrjo

ru.btkuvhuv.auwbbbrjo
1⤵
- Checks if the Android device is rooted.
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4964

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

PackagesDB

Path /data/data/ru.btkuvhuv.auwbbbrjo/databases/PackagesDB
Size 20KB
SHA256 f0bc70dbc62ebcfc8de5532c8860dac520110546991f2051642066d06246c78b
MD5 331bf044c69f8b9fb4160091f519f777
SHA1 830a4c2eb31abaec3faefc2179bd0e41ce3d3911
SHA512 2683020b7e96acf5692d0cc885f4c14c8d02da02ef09e57c49133c51493cf4ff2146c965b12f19d94bd390679c311b0c556d90f309db77a46f2c1ef4492fb631
SSDEEP 12:TLIzyFuaKz08F2Wl7b138mSgVfiEJLm3Bew8Nz4RmBEyPbAVOw:TLIzyFuag08F2WllsDOnFRGSE
MD5 SHA1 SHA512 SSDEEP

Submit Download

PackagesDB-journal

Path /data/data/ru.btkuvhuv.auwbbbrjo/databases/PackagesDB-journal
Size 512B
SHA256 3a970ae2a76958c44c57a9d4fdcd31d0618fe3bbc59cb0f3d98b0e8102d35bd7
MD5 effba1125d913323f79db59f7f54f7f0
SHA1 db00e9fe7368dc8b49da122ade45ec6a7cca0b1f
SHA512 725ac50ee77e70699341708b05ddc55fd863078ebe7a5d26866bcaade425f2d7d87a878ad2205a3a81fa34185a46359e7c3c5898ed20653aea237bcd10e64172
MD5 SHA1 SHA512

Submit Download

PackagesDB-journal

Path /data/data/ru.btkuvhuv.auwbbbrjo/databases/PackagesDB-journal
Size 8KB
SHA256 280e4c474632cf04a4412461df2333d047fa0f96414f88ed096b56b76eb6b4fb
MD5 0d812428199b9f0137c9e49c60e78597
SHA1 3f7e0b1ad85b93a989c7a62486593c3ae857ea19
SHA512 24abb71af1a4154b97143b70022902bf93666d2df7afa22cada91fa0192ea1bac835bbd635fd8c4c4632a2fe0aec12a38aa4c27a237e1c9f3750c0fd8e313c35
SSDEEP 6:7+/l9Ln1Ifg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKwS:7+tgqLiuWdwRmBEyPbXS
MD5 SHA1 SHA512 SSDEEP

Submit Download

PackagesDB-journal

Path /data/data/ru.btkuvhuv.auwbbbrjo/databases/PackagesDB-journal
Size 8KB
SHA256 a3eda42c8e0091479c9334c5990d581a076e61e379bd391c8d9e7671f5552934
MD5 33ca716638fa568d8ffc927984d87c82
SHA1 40091f615ae8c67d1865f54b905114a44371653a
SHA512 eea9222f4f9b2cfbb18e48fd2f22206beee83c4e095438d1a2947fb0b486d65c91f9f26b51905e4d96a9563559e18ea548dab25110c87ebd6ae9e9dec0b78ab9
SSDEEP 6:7+/l9VlPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKwkU/A:7+txqLJdTRmBEyPblhA
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads