Analysis
-
max time kernel
99s -
max time network
150s -
platform
android-10_x64 -
resource
android-x64-20240910-en -
resource tags
-
submitted
12-11-2024 22:07
General
-
Target
e9515238f096e249a73b7cce538cc54dd890f71dfb972e9b830fafa4b52051a9.apk
-
Size
3.4MB
-
MD5
36794af87e599f3598490a24fb772b91
-
SHA1
8eb5e5e5092b5abb8d1f3c04c3baf5ab0321a890
-
SHA256
e9515238f096e249a73b7cce538cc54dd890f71dfb972e9b830fafa4b52051a9
-
SHA512
a2fc5e2cf2990f1d416129b356c37db7dc60e07ce5c74c2d54dd17b9fd66d34bcca8d7ad86c11082501c54b1702cd980106b7ce112c83c0348333a669424ef8e
-
SSDEEP
98304:PPPWl9BImOCp+CoR9b+0sGC9Pc89Sk5rY03Ldraaj:HPWl9BnO0+59iFx9Pf9Sk577deaj
Malware Config
Signatures
-
Checks known Qemu pipes. 1 TTPs 12 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
-
Makes use of the framework's Accessibility service 4 TTPs 4 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Queries information about running processes on the device 1 TTPs 6 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock 4 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 4 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Reads information about phone network operator. 1 TTPs
Processes
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Makes use of the framework's Accessibility service
- Queries information about running processes on the device
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Makes use of the framework's Accessibility service
- Queries information about running processes on the device
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Makes use of the framework's Accessibility service
- Queries information about running processes on the device
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Makes use of the framework's Accessibility service
- Queries information about running processes on the device
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD51ebc5a8729fa3c8090c2198c4e816dac
SHA1e16fb1770a08349d0a044f426c151bb9e246184e
SHA256643b9f7ec87594ba4f6ae9f110981ad59e6182679c63973dec7a9bb27fa54698
SHA5122a16dab883990f835050a91464872638be245cd04f1f08c4cb6ce371b36939c1034abca62328088be18c4de2c054785e331c9fde2b77cbd8b9af2bcad7509191
-
Filesize
16KB
MD57bb70f6df0ce84b813d41ac229a054f7
SHA107b214b32e2ee778dd995b34c3d73b3fb97c849e
SHA256e9a17f41b5c8ee7672a1a0a3d9863bcd52e657c7251e3af2a5327dc85f424b06
SHA512307846157c68f7aa994c47af8fea8043bb36a586933e2f916d62d47b33fe531ae99138d935b2eeb945404c93293dc315f5ac931b4fbfa6a0b6154d0f60c6a686
-
Filesize
108KB
MD5add191da45b940a27c5c10c00750e459
SHA16aa81e7cbbf656cb9e7d0c3baf1ce1fc78118008
SHA256de00eb5f031dfb0d9c98164dfa4cca51b1d65d8dedc91c785660844fc2a95e6e
SHA51255944f2da5ce5025eb84e55b5b790753b22d6d5608ca640c597176baf7f1c9a1c6ea5de7673bfd5e6334afaae3a392bb3f1c2898325e5f756d9200171b71e922