Resubmissions

10-11-2024 08:38

241110-kjydkstdlb 7

10-11-2024 08:29

241110-kdjy1atclh 7

Analysis

  • max time kernel
    55s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    10-11-2024 08:38

General

  • Target

    Indusind Bank v94.apk

  • Size

    3.0MB

  • MD5

    f3b9b1b44ae0ba6b6d90ce886c5482bb

  • SHA1

    5843644659c2f24c5e3f95a60da4e4d179a7a8d4

  • SHA256

    085f5740451dd91c02aa1179a1cd0d315ce7bcd2f3867f9831afff48d8daaed7

  • SHA512

    de89a70cee16847a0fb0652cb04dae9d0b1e83e4a3a5f3ce082a5c318312e6f23bd22a1bcbf1a59557b58627038ca787635cc2b55ddbeac50adef41d25971b98

  • SSDEEP

    49152:p3g92KPXpundj3IBboLbzU24CXrZsrkmc1cnOrZ4NTPFHT5gr41H:UP5uZqoJ4uZsBGcnOGlX

Malware Config

Signatures

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.divine.smsreceiver
    1⤵
    • Makes use of the framework's foreground persistence service
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:4319

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.divine.smsreceiver/files/profileInstalled

    Filesize

    24B

    MD5

    2fd4f209be4d5d168a3c61a2bb845707

    SHA1

    be46a52cbb63ba2edeba82fc2e186fde18b91e3b

    SHA256

    a409d7e9cf6c9a10242a7c663e4f6342541d47afd739d3447b08b609390f05af

    SHA512

    69c689fbc3cb2827e3fee681f7e5714d379cb1da2230a39f8f1a321c08fad6e7e3e411cd86d827095deb6e46dfe58ef7fec6ba8ad4eea6bcbcee931d189265fb