078970dac378d5ce28d98bbe2f89855d1067edaca4e10077151f3a4dfc5287ff

Analysis

max time kernel
65s
max time network
136s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
18-11-2024 04:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

adl.apk
Size

3.9MB
MD5

ce55cf6d05e81bcc4d71e7f9d7bcfcdf
SHA1

cb0a74dfba654c37729be778a6d74768d96799e9
SHA256

078970dac378d5ce28d98bbe2f89855d1067edaca4e10077151f3a4dfc5287ff
SHA512

bf2a4e2a449dc7167634f95e539eac7affae0f8e55cb4078c2957df5b5cef1d8c77de75c5bf7f25716a58fbd43b81f77adf23f84ca41be5e0a423d6f6de5de5b
SSDEEP

98304:/vmWXyiA7w8IxdDjcAT/2QedTGWRPdywjOmdUnvSJaD:HmmLvDjcAT/7eU6+

Score

7^/10

discovery evasion persistence

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 4 IoCs

evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.product.model	my.message2324.com
Accessed system property	key: ro.bootloader	my.message2324.com
Accessed system property	key: ro.product.device	my.message2324.com
Accessed system property	key: ro.hardware	my.message2324.com

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	my.message2324.com

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	my.message2324.com

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	my.message2324.com

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	my.message2324.com

my.message2324.com
1⤵
- Checks Android system properties for emulator presence.
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
PID:4256

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/my.message2324.com/files/PersistedInstallation1622912544104528117tmp

Filesize
564B

MD5
297ccc49afaae98f2d1353f778e1203b

SHA1
ba778bffc1bda5ef047ead642dbde4a27bbe50f2

SHA256
ede302d0e3d415e23c81cd67fd3b131758bac7581a2dd001bdeee40b6ac5ee93

SHA512
d2096f43f17695b640b3472f593066c6b6ddaf10d2121c90d16dd565f38a19b5fcf55c8126e4ababa23d165390ae105b5b7adae063c91d326382ea4f8dfa9a4a

Download Submit
/data/data/my.message2324.com/files/PersistedInstallation6000559988406709074tmp

Filesize
90B

MD5
7c4b4169f1cc9e5ee693f9d4a81f7c06

SHA1
c4a050cea48ca1186a6aca73eae9b0ce3cf7dde4

SHA256
b8885d59de0de411b0657a5a1583c874e627fa19b86ba7e6e2202159816a1cc4

SHA512
a819dbcb88925b7afba47af1deb62acf9d1cec9c7c89df33486d2d5659abb23fe71de9bcd10f892231c7e29b20ed0bd179f2fb726528dbb9d0d9c6eb1b23b065

Download Submit
/data/data/my.message2324.com/files/profileInstalled

Filesize
24B

MD5
9d2c43af8a8751c4f717fad0563c7398

SHA1
134896bfa3c789b409c9d24d23b2b51bab051254

SHA256
642b0003fb2f3e3907c028fff266d968fb4e29517164b98b85a73a2f7f3acea5

SHA512
4f17496ba5d05f6b370a7b83b8571a89f85cb756226540fb069db926e6cee2edc10752b228d7d22f833ca92cf056cbdad6053f2a7505195e1065dec93bd5bd92

Download Submit
/data/data/my.message2324.com/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
f9073f836526c4aaeb5290aa9261223c

SHA1
58d53e9179754788683a37baf251ae6eb7bcf3cc

SHA256
449854c2941fd32753b53c09cd0aca7e078d7089b58a17a1789e2549849aebe6

SHA512
32a0a376674167c58555f3edd41a69ee64e5338ad7dd5d898b949a762ab1c08a7bd579e7d826d7c3eaafd2a95b12a6d631fc8efe607a1dc6bef78343adafee28

Download Submit
/data/data/my.message2324.com/no_backup/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/my.message2324.com/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
70e07fcb65f64526c76b7a3583d6a1e2

SHA1
d016003888265fc848f6f763f9c460caa05aa91c

SHA256
3cffe4a20ba01919db91ea2ba47a66e97586ab8a6b94e1add24fe1aeefc24373

SHA512
c953d5cecdfdf7c4e74b45ca9c8ddfed72843943df2f0c65eecf71b5193fd6a027a51cf36c17dd860174a5180b071d0cc34e0ff6b0677c67e33358b66a84ce23

Download Submit
/data/data/my.message2324.com/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/my.message2324.com/no_backup/androidx.work.workdb-wal

Filesize
116KB

MD5
7db1ce643d972cf63e28944b91199167

SHA1
66f3325f818f0a43cc90783f6d3b8fe80f964e2b

SHA256
a12b2251a4edbe4207ff2f7a70a4125432e1b16c0fe02de1f64b767c314e2da0

SHA512
7a88aba4330055b34fbc48a16ef495319bf86946d78af55ba84519fcb141e83e5fe76c7da812a4041a74f826707f5bb8dbfbb5e0c9b8112e19ac0cd860c06707

Download Submit
/data/data/my.message2324.com/no_backup/androidx.work.workdb-wal

Filesize
124KB

MD5
6e0db4155b3da29f68abc885aa39300e

SHA1
a22c8effd96f8cace958ba658871b032522b8e29

SHA256
ea36f4df14ca412bc28477fb810f6d4998390a69cf54be6baf4fab574f9efe75

SHA512
80ab1ea38ab49ea67e2379b3488e5f959f3df11831e2f9e15a1fb5f284898ada4da8de302e56d5f18a23e9e247afc5ed20d693339b72d1c7685e19fa8c89fffd

Download Submit
/data/data/my.message2324.com/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
eeaa83071330d402fff7bda480f33338

SHA1
4deaae056d5323473a5253f469173985612af53a

SHA256
c089769ec8d900e694195015496b6315990d1fb1d8e5b1277a9c4bc69ea93064

SHA512
a3df093a503591b6f72708de364d223ba3440fb233bc9997ce6bda5de76cd57c80f3141abaae5aa2327beffc8f607f24d6e7bd71baeddb432a7d3f5b922da841

Download Submit
/data/misc/profiles/cur/0/my.message2324.com/primary.prof

Filesize
4KB

MD5
81493c6372dd6aa1963fda8c32170473

SHA1
f79e33cc28e48ab50b369036b703a2faa95c38c2

SHA256
5f382df9b747d5b004d636f1f055f7dfec3c7b6b8449bf27ab14c3c473ae301c

SHA512
fcf05201b5132717e15d123b5142c8a851f59aff023f328b99c6976ac2b649333e68cafb5782d9214167611a2993983521774e512af7374fc6f95862cd71310e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads