ff0312c258ad74316d1811703cdfded4ae4dfbf841aacf1150558c71e5b0613b

Analysis

max time kernel
8s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
20/11/2024, 05:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Union_Credit_Card[1].apk
Size

4.5MB
MD5

ad109964f6d68bfecce5db1c6c6a21fc
SHA1

87f39addd11c6f8f3b934bcedcf325081f7dfb95
SHA256

ff0312c258ad74316d1811703cdfded4ae4dfbf841aacf1150558c71e5b0613b
SHA512

9999db0e1810ffa2af27e7018401ba3ceb8c669e86d443c579f2be30905594f0e9f55a7c83d4c3e243cf381811c3b41b7b10d60831ab11fd8235ce725f5fae7d
SSDEEP

98304:BzDgDFqdaWlMUxz8fwuGJLjdIwLetTd8h0qbXREjjqfWmGZTWqmPNfre9v:tXaQMS8fwXJjdxe3wfm/qfWmGpWlC

Score

8^/10

discovery evasion

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.isg.mobile.creditcard.andhra
/system/xbin/su	com.isg.mobile.creditcard.andhra

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.isg.mobile.creditcard.andhra

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.isg.mobile.creditcard.andhra

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.isg.mobile.creditcard.andhra

Checks the presence of a debugger
evasion

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.isg.mobile.creditcard.andhra

com.isg.mobile.creditcard.andhra
1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Checks memory information
PID:4638

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.isg.mobile.creditcard.andhra/databases/com.google.android.datatransport.events

Filesize
40KB

MD5
1cf3f63c021d755a21623e6d0e86dbc6

SHA1
e40e0f1faa61abcca7ba3394c54c92ff7334b49b

SHA256
100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895

SHA512
38d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466

Download Submit
/data/data/com.isg.mobile.creditcard.andhra/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
20853a75831b72959ffaae6d818db388

SHA1
c7fbe72c921900d65b2c740ca59702109515832e

SHA256
a378491975fccab674e0cc9602a5ebde2cf9173e3c1cd6b0029921676f19074a

SHA512
a36c2f45eca88bcf9381392d8141aaa2c2c6f0a87ae62e6b986c44e677d95cd3123e32a81af30a8f7b9c7a1b5bf25696ab099a0224ac826f8c766f7c4cb5615e

Download Submit
/data/data/com.isg.mobile.creditcard.andhra/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
e41101777eae44c709f5c652209af3e9

SHA1
ad9fe1376073643698d0d62e3776244ca23129db

SHA256
51ab0b3e6f0b2707666f287630a1f5ca3dfaa44841c2b662d14f17e8ae657c6f

SHA512
b6ed3ad7b5fef0b201103f2695a15fdcad1275d135ef1934d8738401f8db4b277826700142dec7c9b6e77d6498a4993333cafa371d83046c1d46374961d353eb

Download Submit
/data/data/com.isg.mobile.creditcard.andhra/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
4ec1ac6e83fa1543d86870d6ed428461

SHA1
a88327e588179da62b2c8f0eb0165eecd617355c

SHA256
a6976e01afce203b2e9d9ccc6fcde7831b53409d060d53d1cb32288b72912bac

SHA512
4b12113edb9b019ab744e61f3a57db20b5ac71601d381a1b40a0f013842dde8365354e187cea277bc9401de9f6140262d5d7277d3b984f2522aeeba11926cc84

Download Submit
/data/data/com.isg.mobile.creditcard.andhra/databases/db_default_job_manager

Filesize
28KB

MD5
4a1f18b25648733896b29fdf2a1d89be

SHA1
b8883150a1eabcf6784dd19b959ad4ccfc020744

SHA256
18bc4e177a262bc1db79293c918c1e1fd9d22a43cd8af9f6f820e02250d6b9a1

SHA512
d241d2a4828c236d31c0cd712787bf83d946c91ee126dc696bc1d237798afea3d19fb94a59fc1255a8af3b29174180e72be5910561190475c35d21c31a17ba0e

Download Submit
/data/data/com.isg.mobile.creditcard.andhra/databases/db_default_job_manager-journal

Filesize
512B

MD5
0d2b1f6b109ea8cb56265e7392dbe84e

SHA1
e08b1a42ccf8462f50a9a8caa6747cf3c096e2a2

SHA256
eaef2dbbeecfe992ab27e2a61caddab3cb41a3b00c18145454826bfedf458807

SHA512
9981d1c47fbe1c27ac3484ded151d93eabe9a634cc17d574e9723f678d37ba6d2dfd7229a9c28eae1e89fd895e0a5a81cbf3ec28d1b31cc221fc3072501b7283

Download Submit
/data/data/com.isg.mobile.creditcard.andhra/databases/db_default_job_manager-journal

Filesize
8KB

MD5
ab029459c737fda817e61fc55ad6e0ba

SHA1
4c543fb0d6b7214b9f47f53d93de625a86343526

SHA256
97be5be71afd6b6caa1d46da57f6367feea7a7e3cdb87bf9a8b602b4be63b064

SHA512
45ac499876e70ea8b104deaa3fa2d8d1a47f3aaca76e7f347865f6f159cce5ee18de453b23eded67de998ed11dd7dc9f16e64396f26c806c116cd429c03a73ef

Download Submit
/data/data/com.isg.mobile.creditcard.andhra/databases/db_default_job_manager-journal

Filesize
8KB

MD5
c5e060ba806b1d48b7fc61fff5507884

SHA1
2c186fccc641c72cd80e7859a2057ecdc7de1190

SHA256
72cdfd8afa9e97e3284f563b32f0135e6a97de28eadf5c036a602e4c94635548

SHA512
2947d9edb065fb62afdba6b248d27024223243c6fb5f05a71faedc36ae568e2c322e7e7ad20c7b1656a4779a5754dd0afa5ed778f364d60eec56dc0798bf6a58

Download Submit
/data/data/com.isg.mobile.creditcard.andhra/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d9cf75fdd1c2292d986f6c3d5d60f2c8

SHA1
07ecb1d3a26d952ae5fecf54f36699ab498510b1

SHA256
2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

SHA512
442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

Download Submit
/data/data/com.isg.mobile.creditcard.andhra/databases/google_app_measurement_local.db

Filesize
16KB

MD5
cec8813600c305a9aecf1429a7a22bfd

SHA1
ec4cbf1f2aaf8eb35d0d624bb93cd8e5de1b96e1

SHA256
dfdd40e56d5caeb0b71ae439f7be3117cce38a550de3d8922ac642a3b2135868

SHA512
38c09fc71b8169d1bb259b835f9fc2fe72c722593b5962a76d5ed5f37782fd2cbb55dba56bcfa1af7a8a8d7d6d1472afe0220dc2189b3fed3e00a1eba3d7f8ff

Download Submit
/data/data/com.isg.mobile.creditcard.andhra/databases/google_app_measurement_local.db

Filesize
16KB

MD5
99c9c81b9ed8c7e26445dbc22fa0db2f

SHA1
9e14fcd78b60117f0db760c28d18f52560306df5

SHA256
9bebfab15625d4db0fd053f9cf3a39d5f095bbda320ab932e0c12fe0e4456f16

SHA512
83628992feab137e75a8d630a29700e4a623b30180fbfc13bbfe4dbf9043b2812a7e233a8d96be8da3d6f6e43f35bc816ad2a580d4de8335373cf9dbc5b0f39c

Download Submit
/data/data/com.isg.mobile.creditcard.andhra/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
51b36c92e8503fa7d94ae65c37d9e63d

SHA1
b7e5b1584cb715b1579cf5b6da6e781203487d8c

SHA256
5a2b994e56ccd7aa2abf5e85458fda3ad4c572e4e69fbc9564776148e99a0eb5

SHA512
4f7de28743c921d5f393db254f4e20ffa4a6d3aee01663a373f6f269db022111c87e5ccfb8a2b3186d6d6f08949631377b08e06e93182ee126d2c0ae1e91b55b

Download Submit
/data/data/com.isg.mobile.creditcard.andhra/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
0c8c1fdb8f52c733f86f330a3ddd1e29

SHA1
9ba8667cbabb2dc377d10c977f71064a539be27c

SHA256
c23976482247dcccde0bf8730971258fab4272db1cf0921dfe7dd1d2aa077b27

SHA512
24ae011b0772c8a7e39e43c9f8497dd2e8d038d00128989cbded5e1a11ee06407dcf7ca8d096cf4249851b7109dbf5e78f501bb04e9c9150ab0eb85995389f9a

Download Submit
/data/data/com.isg.mobile.creditcard.andhra/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
366359410277766488766d03d3952130

SHA1
31036f8eb39e426b2bd09b2a03ab1069d95ffdeb

SHA256
9ff17de20ac81ae55b358a6f9d4c411c6f0ae9f895f9a8a873e8465ee749d02e

SHA512
a5183db8457d936633930f6edf714a59e352f81124033cc6efc025bbab10a85b66164fb19daa6c0a530f4a2fa95a07440d9ad87773b5a05a135949cb2c3d5360

Download Submit
/data/data/com.isg.mobile.creditcard.andhra/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
85e48ac717cb0225da0ea34b5e8f9500

SHA1
770a9837aba5dc1f15f849cf03c601d38e1dec3a

SHA256
bee72767040f76905f5974a215fac7f4d53f5101659801042a176c1be9e5278f

SHA512
bb8043cfc360a0af5a1dd2830331e04fe00389c139dacf63de1b250f85e0587516b9ddb99a43f3a6109057d4bce1da4ff034c6235c13c1b521089c8a48f9e08f

Download Submit
/data/data/com.isg.mobile.creditcard.andhra/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
58842c82f65888e0a399e285a1f5d9e3

SHA1
bf45b2210ba11c2301a71b28675292494217a78e

SHA256
ea256a65a59f69ff82b6b0c8048f112d122031d94935fdc70d0d17cf53bb6bc8

SHA512
5eab3643a692706bbfd5bbc87cb25d9a4b54fc240f2c596480f55f76dc19395acecbd32504befe811115ff8b10a865ba8c158ae72c04c791bdb051cb4f265655

Download Submit
/data/data/com.isg.mobile.creditcard.andhra/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
53b0950609a205c0715e8d3a429708c1

SHA1
e30e69a3abd10b3a781828df098d809cf4100b13

SHA256
0d14900ac39b59801226877f078e58dc148dbe8df71993f75781b500a2820405

SHA512
47b45d6bde6e5b8bfbd67d8e293e076d12be345c003f21987575215e164aa323a1a4896155956a411127c60274e70ec993a8276045c36bbe834d45abe488e94a

Download Submit
/data/data/com.isg.mobile.creditcard.andhra/files/.com.google.firebase.crashlytics/report-persistence/priority-reports/673D774B03470001121E9E9822FB90E2

Filesize
36KB

MD5
011230708b5cf6ceac09bf2528e2c832

SHA1
f7fc4e015c89ec5c47579617f276eba918b0789e

SHA256
706f6e13f3f7d45bf3e7286b313e3941ccbb722f4eb84202b01cc1cf647ae501

SHA512
08061561547cdf9e54d54ebdc918509b12ebcba43b95b7577913e3ed9ba1ab71e53e5548179fc6ede9e39fbeb160b443b5f4944ba35254f2c24dbc2e598308dc

Download Submit
/data/data/com.isg.mobile.creditcard.andhra/files/.com.google.firebase.crashlytics/report-persistence/sessions/673D774B03470001121E9E9822FB90E2/event0000000000_

Filesize
35KB

MD5
7fd0496500db8661ff476a043e7dc8f7

SHA1
536b97e354b1ff70982fd8ad429717b799fe3e81

SHA256
f265e5690f7d0fe677f1462ac4d00f363d6aac0c8cd3dce8941cf55c2fb51169

SHA512
cbfbff600906c776f468cc391046f456d1d27a56acd4524d15e55abf9231cbccac2b50e48452790d73ec45946ad811395f39e6d02e73257b7e5548c3544da28c

Download Submit
/data/data/com.isg.mobile.creditcard.andhra/files/.com.google.firebase.crashlytics/report-persistence/sessions/673D774B03470001121E9E9822FB90E2/report

Filesize
750B

MD5
401ad8131a1da885d9bb8d0a68d0d762

SHA1
83d43797f71c10b966d32ade969e8a81221d71c2

SHA256
c7213458af6427a94fb5b74803b126ee7055ddd27f3a37df1a3e225c14cd8f95

SHA512
f3c3b16e6652f7ea42662e9cd276001a662fb03ca88e615a29e627b07df6b0d20ccb420dcdeecbacff037b19422614be6190d4db15b5793b7f0235dd7b5c84bb

Download Submit
/data/data/com.isg.mobile.creditcard.andhra/files/.com.google.firebase.crashlytics/report-persistence/sessions/673D774D00E20002121E9E9822FB90E2/report

Filesize
750B

MD5
421afa7bba347cda279ea2e575167588

SHA1
ccb725c7de5f6d4fa226d683f1d3bb2509b1b115

SHA256
a1ca131c8b5d31ef877d00b85254336cd7e2384e7d71f0cd669a00c6839bad61

SHA512
787888453c53d7664773ca817b59ea9cd5e76e553ecef7acfe3b3cd7509dfe2d1276979f99eeff633fff0fb7e57609a3e1a62aa2452dd27a8514b4e2647332b7

Download Submit
/data/data/com.isg.mobile.creditcard.andhra/files/PersistedInstallation2128157396468265296tmp

Filesize
562B

MD5
02b6ec1fd514458e6ae9a55678d9a6b2

SHA1
6a12c10cac17b67feecff303a6a206ea103e414c

SHA256
8a078339fd7176399819999bf803cc6fed5d6920f5070867afb12e708d2da758

SHA512
d652a29aa7bcc0337c2ce2a644af6a67f0d585b82346d1611c7b680a143036c61e1799e8afb77ce6fe1d053fb031fc4ea878e463edf2dc414ddc6cd02287f3fd

Download Submit
/data/data/com.isg.mobile.creditcard.andhra/files/PersistedInstallation4044145973418472005tmp

Filesize
90B

MD5
3de4c1f8c3cfa6f19e759b8f7dd460f3

SHA1
06c3715a300b8dcdf71b1628b7389ebcbab8d50e

SHA256
57c70670e10db72a30e5829cd0b71bb9e612894c8c185fbf9fac2abe155db5b8

SHA512
0b9643acfcba224e3643c7697e4fec2ad5388075b672e78e6443705ddcc45cc242e8b3bee28a54bb110bfbf854f7eac6053dc0422f10c27e6ff4ef5e9c0d6918

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads