Analysis
-
max time kernel
75s -
max time network
302s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
20/11/2024, 13:40
General
-
Target
ULoan-v102.apk
-
Size
10.4MB
-
MD5
6552ccfc688ecb1657932284691a9be2
-
SHA1
2f565f53b45e2d4afbc734dc07a95e9b49d00bad
-
SHA256
7e180b24b35090f82580f0928c753d3d3f52f1739b8f3d198886b1d9cc7ca61b
-
SHA512
30eec78ff853f42086126e5a7c67a35fb87ccdbc93a3134e6534c644eccc710f129e2558a6fa971ca74cd10335723f7c617aa49b9841aa7f79778625d26ab711
-
SSDEEP
196608:ARWx+i4phIdHRxMwhaI3nrfSiT7JboxLoAo8j149XvOzbUKqWHH8NOu0eHxacLfi:As+iXxRxMvqeiT7xoi6BIawKqmSOupx6
Score
8/10
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
id.max.uloan.app1⤵
- Checks if the Android device is rooted.
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information