deea60bd4d321389147549ca5e95facec0238f172a2bfe9e6ca8547d9c858549

General

Target

Angry.Neighbor.4.0.ver.4.0.build.0.apk
Size

92.5MB
MD5

0dac84b9e738ddee56a2ad661520fb7f
SHA1

c071765591f79e416f3a58f7eb5ce7edf7d88b5e
SHA256

deea60bd4d321389147549ca5e95facec0238f172a2bfe9e6ca8547d9c858549
SHA512

2fddb2b0e1f92300781509934e09fa4157aa56fb397aea92565326727835384de2a591aa4e6abf9dc7eebc403fc42dfb75e5e407864fb1e1d83df403110b01b6
SSDEEP

1572864:7uLChCVVPXXPnwfULWqrn0vRut0yCC5QEiTEPTqgPDzNDnBi7y/0bVeO4ZFRwPy/:7cCwLPXPAUa+n0vYtLQuqgbzNAy/SVqJ

Score

7^/10

evasion persistence

Malware Config

Signatures

Checks Qemu related system properties. 1 TTPs 1 IoCs
Checks for Android system properties related to Qemu for Emulator detection.
evasion

System Checks
T1633.001

Processes:

com.invictusstuido.angryneighbor40

description ioc process

Accessed system property key: ro.kernel.qemu com.invictusstuido.angryneighbor40
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.invictusstuido.angryneighbor40

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.invictusstuido.angryneighbor40
Checks CPU information 2 TTPs 1 IoCs

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.invictusstuido.angryneighbor40

description ioc process

File opened for read /proc/cpuinfo com.invictusstuido.angryneighbor40

description	ioc	process
Accessed system property	key: ro.kernel.qemu	com.invictusstuido.angryneighbor40

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.invictusstuido.angryneighbor40

description	ioc	process
File opened for read	/proc/cpuinfo	com.invictusstuido.angryneighbor40

com.invictusstuido.angryneighbor40
1⤵
- Checks Qemu related system properties.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
PID:5080

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

1

T1624

Broadcast Receivers

1

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

2

T1633

System Checks

2

T1633.001

Credential Access

Discovery

System Information Discovery

1

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/storage/emulated/0/Android/data/com.invictusstuido.angryneighbor40/files/Unity/local.7d0858faa06b5e646841798ed577501e/Analytics/ArchivedEvents/173232494700000.68267213/e

Filesize
63B

MD5
c50d1fcfa3127c33eeb3e58edc5370b9

SHA1
caa6f83e0dc62eed405c2411b6166337060bd4a8

SHA256
9a0c4d806cd2f634a2b17ca5c02b84fec945b8b33ee22db78d2f35581706ae00

SHA512
422a527c920cc3d829b2779733b8c7af5d1cd92a86966d6f0dc6c7baae901b74b22db982fe2bd891fdba45d4f44e44f4b53d2ecfcbbce37f2b14361bd4c7042b

Download Submit
/storage/emulated/0/Android/data/com.invictusstuido.angryneighbor40/files/Unity/local.7d0858faa06b5e646841798ed577501e/Analytics/ArchivedEvents/173232494700000.68267213/g

Filesize
1B

MD5
c81e728d9d4c2f636f067f89cc14862c

SHA1
da4b9237bacccdf19c0760cab7aec4a8359010b0

SHA256
d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35

SHA512
40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114

Download Submit
/storage/emulated/0/Android/data/com.invictusstuido.angryneighbor40/files/Unity/local.7d0858faa06b5e646841798ed577501e/Analytics/ArchivedEvents/173232494700000.68267213/s

Filesize
339B

MD5
f1183276544ae8309a480d172165f717

SHA1
745147b23164954aecc9feea2d8b9a4367f6c4e0

SHA256
50651798b686f529dfd13300d837a8dc951d2d4296b6ced397c4bfc3ddc5d723

SHA512
99123773045b5befe5876457b15846fdeaa02a319890b6f9328bc768e4e3aa24bce16f0417f7518a613ffbbdc4b40f536d7ad66db8d2d557503564f32696b7e4

Download Submit
/storage/emulated/0/Android/data/com.invictusstuido.angryneighbor40/files/Unity/local.7d0858faa06b5e646841798ed577501e/Analytics/ArchivedEvents/173232494700001.68267213/e

Filesize
106B

MD5
05ee80f4ec4967f2fe335a9708983265

SHA1
65dc8ae44bd6e67c245725711b53118153aa5d2e

SHA256
9b715ae66005b79635ca531d94ee206867b4cb0e8594d8ff9281dcb9d6a16452

SHA512
9c6453d988358c85ea140d5a197b17070c715a2fbef916474a454af3af3ff8b6098a981b0482be53e1f466b31633e6101436d38498ecba260f7e6c8699b29c73

Download Submit
/storage/emulated/0/Android/data/com.invictusstuido.angryneighbor40/files/Unity/local.7d0858faa06b5e646841798ed577501e/Analytics/ArchivedEvents/173232494700002.68267213/e

Filesize
982B

MD5
aa0460e235770d93e71d5c7be075850b

SHA1
c373f634e45ab1a5fd35c8fa9109f32052fc0271

SHA256
aa41ccdeeffca610fb9ffcfafa92592b56cc557f92c163b35827e9b07621a2f9

SHA512
b55b466fcd08e1feff64e7d0cf273f378d25d0a63fdf9f9bc6aaacb7976a64fcb8a1eb5339b029fa961de6f5bec7ec9c93f05a44fa74e604788e6b35c1168924

Download Submit
/storage/emulated/0/Android/data/com.invictusstuido.angryneighbor40/files/Unity/local.7d0858faa06b5e646841798ed577501e/Analytics/ArchivedEvents/173232494700002.68267213/e

Filesize
1KB

MD5
8c403e7a4310085fa1c5c5c0cc5cd644

SHA1
c3143885c6a61f9bfe041c4994a748248a0f746d

SHA256
75a395fca17957eccaba58d62596d9c3a137911eeb3d31690b6194b08a5a4d2c

SHA512
b2db561953e83a483659e996fc7d813d56c3c4d654ab71ce747ed5babbb819b76bb41b82aa7f2643849bcd767cbf91f1fa424c183452e91c7594b7a6a5bf1126

Download Submit
/storage/emulated/0/Android/data/com.invictusstuido.angryneighbor40/files/Unity/local.7d0858faa06b5e646841798ed577501e/Analytics/config

Filesize
293B

MD5
8673a8ac0b06a9d056d08d62f857ba4b

SHA1
a351bea1932270bafbe468584058fef20dcfc31e

SHA256
83b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96

SHA512
edf28eb7fcef654f139285d308f817ee230d6f064a4c865109d6dfe6f73c11f8f35737c8159c8a302118237ab980899ba5773f547cc9da4028643a53b08e324f

Download Submit
/storage/emulated/0/Android/data/com.invictusstuido.angryneighbor40/files/Unity/local.7d0858faa06b5e646841798ed577501e/Analytics/values

Filesize
153B

MD5
2993f3c2c6e892d09818f92833a4a143

SHA1
7c57fff8f9c784ed40c3bec8ffcd26fafc558acc

SHA256
376d10e03b52be291192e827efe31ee15a578623acbe1ac417b29de6e792230c

SHA512
796aa202b6efa1fb61e4a51bded230fe4e7484638488479c2c19838adab8c2e726b72d0655ae7c3f91939cd11712e34b731dfad8abfad4cc552c5179e9d6abe1

Download Submit

Analysis

Sharing