Analysis
-
max time kernel
91s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
21-11-2024 07:22
Static task
static1
Behavioral task
behavioral1
Sample
HM!_Esp (EroGanso).apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
HM!_Esp (EroGanso).apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
HM!_Esp (EroGanso).apk
Resource
android-x64-arm64-20240910-en
General
-
Target
HM!_Esp (EroGanso).apk
-
Size
156.0MB
-
MD5
d05ef6f5dec809f11110f5ba25455cff
-
SHA1
c6e4f6a696ecd4b1174f7c4d894a1860e8f73675
-
SHA256
8f72dfeac51ecefc3c5d82276e291ad403eb596c05c2e0f2bb5fd8267388a680
-
SHA512
3a3e24b3c8f71148a27c25b6cdfc9ed3933df2c3736f23a9c4614bcf5abc5a6833e3610c5d8037abd732d9f1c3b536ffa2ac98c5996f8f8cfbfc65cf851eab26
-
SSDEEP
3145728:H4+l7IRSwexO8V7ZCJqowffy5lKFVUHY+W7xCgk8mcIfVBm7RZ/4OiVKk3d:HfceaJoffaUFVUHYxUUIfVkgOI3d
Malware Config
Signatures
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
com.key.pixdescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.key.pix -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
com.key.pixdescription ioc process Framework service call android.app.IActivityManager.registerReceiver com.key.pix -
Checks CPU information 2 TTPs 1 IoCs
Processes:
com.key.pixdescription ioc process File opened for read /proc/cpuinfo com.key.pix -
Checks memory information 2 TTPs 1 IoCs
Processes:
com.key.pixdescription ioc process File opened for read /proc/meminfo com.key.pix