fb8eac6f4a5eb59088898f27f19c35862eec0770e0eb7565b295fc8cfc4e7bb3

Analysis

max time kernel
5s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
17-11-2024 05:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

app.apk
Size

3.1MB
MD5

7ebfbe0605c081f7dc96c4edec09cf05
SHA1

7e60dc7ba39f7fd0718a4cba8e3a6ebf27891c56
SHA256

fb8eac6f4a5eb59088898f27f19c35862eec0770e0eb7565b295fc8cfc4e7bb3
SHA512

3a899d1bcc69ada47414144f8338995f9688c6d92c41f2ef159ea1781d312fc908405c246782eeba5f1df2482935ce06acf741b6c05955f81b077bb0164867ae
SSDEEP

49152:4bmP98UKolddcjZrNEwglZpakG76aJBLgKt2IeHrm1tqs3QDOCd/Tv7CX:NP9DKoFqZrNEwQ1Guo8i4SDq/p1T6

Score

6^/10

discovery persistence

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	abee.app

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	abee.app

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	abee.app

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	abee.app

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	abee.app

abee.app
1⤵
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
PID:4254

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/abee.app/cache/~test.test

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/data/data/abee.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
5534ad426762d8e7e9f7b9b2763a7fc4

SHA1
2b5645ee0e70bc597a4c2e1b1b3a09527c625e7e

SHA256
561cd03a1187b2a99afd074553f9c0dd3a2add11c0df2ee7fbeb7ea4fc6fb28a

SHA512
c34cb17dfbce73436c84df2a3751403bb5940d7f879c1ec10589ccc37ee1409082bffb2816a4629866dc117fb0b414193cc1dd1a974ceb811530182b6a8075b9

Download Submit
/data/data/abee.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
caea891a6ab3a54591cc154fde7d3598

SHA1
9354d8385fd548be11e644675c1446f8b34c5201

SHA256
f971848523f4cd838bef81b192909d5a020ebdb335e1c08d7bcabf9fc556af31

SHA512
c9bd2acc67b86a4269a7fd440415609a7e1b09e6524cd88a84b9e24e584bc37fe831e59f38b6cf3f6008833a5f5cab1ccbcc2fb2f046042a758ecc1a7abd871e

Download Submit
/data/data/abee.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
4448f5f22374cf5d772ea506137efaf2

SHA1
aeeb63e13be321d7094f09a5404e550f050d509e

SHA256
07b5f641f36fd12c7d50d2ce17c4b03e4e72cb019216f0bb5f4a309b006feac1

SHA512
fdd3485b2ac1a7836de510ca01ca82b86c7ded22a93cd076719734ee786ec6e48693b8bd76e8b95a7c57e208b03c04bcbf08ebef25e17b34eb3d18e1bb1b045b

Download Submit
/data/data/abee.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
76c55501037860355eb25009ca936686

SHA1
6c929d37c62b1ae1e4e05ea692ed1106fc5fd4e6

SHA256
cd14e67e3046f87d758250b2c8c5ef869624f11c8c58901e5238094ead596e72

SHA512
a51d3eb86ce2e480ff6cd1dfa72d85c7cbb86f40ac88d3b7bfc4c15acacfaf0a672d8b1c052531d56af606ac0d2550824c82965ad65b916b00ce3c8cf24f87ff

Download Submit
/data/data/abee.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
3e881d9a01ca707bed38018ac69f4518

SHA1
5820f9351d7cc8082de6e5686eb9f8fedf6fb830

SHA256
4a5bf9bfe9b032546f886dd5fe6717de78716734aaadab620c0444ed6df5151c

SHA512
8f0395c94b3a449f3c61e7117f400c7b8a12c23d3655be6772bce2c8aa0ec8d8be8000c5cd2c6e10b334ef54a4add5583717393c3239da80c334c45b8b392db8

Download Submit
/data/data/abee.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/abee.app/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
47a46ad89e4be33bd256212455f8eb57

SHA1
00998feed6ac0ed61e6ff0749561ae033c141c89

SHA256
bbebe16df4d26e418b67b5378ba647a3eb423af4af930e661ae10ea1b6c9ad9e

SHA512
cb5ae61563506b0ada208837ab88904f69360ba4fa0df6dafd78ef1ce90791d61dc69be801e50ad5938a89b1c7f9f0c03d9a5ae48b7f0e3ae59c464993dc8f47

Download Submit
/data/data/abee.app/databases/google_app_measurement_local.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/abee.app/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
9cf2b04ae197405fd41b435392ff1048

SHA1
3933fe7090b9c7e94760949c02c7de60fb283f16

SHA256
5bcb9c0460b29d8c400734a09953eee0a6941eb4f9fc35f6d628accf05857f6d

SHA512
6b94b1bc16f0dba3b85878e820e1be05e93b1336672f4c9766552d9809adc8c434d3ffa4257c5fb7f9de1c99d706419768e10ef8cedf58257c0fc5761f8113f5

Download Submit
/data/data/abee.app/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
050b6da17387343394b184e00211a15e

SHA1
fa0da94e5c8c8ff3d36c5af7b95ecce5661a794f

SHA256
b75f842199699d746ef689267f08e995d2ab03f2833ee0e0336aa2ee8efcf7ed

SHA512
31bcfa6097ee761f0bb66123d944bc0561cdef302d124a67dc44dd8215a996279bef38f33f82b33ece6e364030a2786cef0b47444ea3904abf9c4bdb3c1634e4

Download Submit
/data/data/abee.app/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
3c450e929e5e477c72476991e46ca259

SHA1
7c9d4029c8889eb4a9e7b8b91a6dfae2005446e7

SHA256
b27073bfbe6d7932435033140c23435b514c92ae03a0d22b34c08458ece1b11d

SHA512
2b56b137f048d671da17dc86fe395bff038562ada7e283c1baddb226e598cb56be234cd7e080a7b29130b52607bd2b6f1c9118d491945108b680173568325c75

Download Submit
/data/data/abee.app/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
9a6bccf73fa663b7c42e6f485660b1e3

SHA1
91e5bc97bfda897fa2b020f6d4d71c149d8d478f

SHA256
badb722b8c0ee4f5b722fa3cb34c13a3005209aeae764d6be445c3ea0a2eba92

SHA512
83e981b2bb6aecfd05c3f7ea710432cb406b10ef4d264e05289fa2cc570980f90da8f0409c9de889167b476659273d919aa816a8467a793b16d3cf1265120e07

Download Submit
/data/data/abee.app/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
4450fa230cb09976dabfdcec145eb97f

SHA1
0a41e97a87c65e29e599583ab3c2472fafb30399

SHA256
4b6622daddb724a9ecc8ae0ed3b8cd3a5eea2be2ad4a99fda9737063b0da3784

SHA512
0b02d6f0bcbe1f027af8857797cff08463e81243d04918969697a4c81e2f7b644bb3ef5f5c5ca14a966d47719b3109a5ec09e27a006df1bc5165747b3ec0a857

Download Submit
/data/data/abee.app/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
81fde21991be525d0fbbbe8379703ea3

SHA1
45263fe952600f780fed3253503d16883b348bc9

SHA256
7c3025d2d7cac33d6a0478ba8ba4b74451e36b0cd9b342661501a0f894d4992b

SHA512
e6dd15506098f1c8672b6a70d008332a86f896b12c53e5715208587b87e54ed7a549503536042cf9ba4c799411cca8e7c15ed4dc9b82cebbcae3ff1cb9c5e366

Download Submit
/data/data/abee.app/files/PersistedInstallation4503914530675229892tmp

Filesize
90B

MD5
44d913216e5d60094e02aef176c0db88

SHA1
ad143c68c0111713cf5f3c3329ad8fa41f81c5eb

SHA256
97a4e67412b043e85401433a4d2774ec1393d88166f066b46ade42cc332d0bb9

SHA512
6c0820d5e36e5a913910ea47c00e3673f434777d19034481ed075f25508ed5625f59582682d12db8ee0c0be75c9202a565e966c4dc7325ba0f2068d8983a0c59

Download Submit
/data/data/abee.app/files/PersistedInstallation8976760207313789787tmp

Filesize
570B

MD5
1ad85499781db2430d41c56c9fdf78a4

SHA1
31573f2b11b4163944bf8f7abb0a6ccaa4057531

SHA256
e930d4a8d2e3e378be23b139e9e741de12aa03770967510affac5b59e7095b78

SHA512
6c1e93a1c4a149277995e8b3ad94ba4ead4e8262a56895a4d30c831c9469434848733decdf25e46abeba7216c39fd009a60044b86a5091c09fe1d4377e30160f

Download Submit