32a04358c20a4e96e94ffae303527455fbbd8aa40f179b2fdcf3cbdd63ad4747

Resubmissions

27/11/2024, 09:56

241127-lybnssymcs10

01/12/2023, 17:02

231201-vkg34adg927

Analysis

max time kernel
2s
max time network
34s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
27/11/2024, 09:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
scott_pilgrim_netflix_anime_1462046204.apk
Size 12.1MB
Sample241127-lybnssymcs
SHA256 32a04358c20a4e96e94ffae303527455fbbd8aa40f179b2fdcf3cbdd63ad4747
MD5 15d7a803ca82a5f2a019927c64cb0c98
SHA1 fe9d9bd41eb2c88d1b838ce2ab12494775556de5
SHA512 22afa1436b878b4678996febb0f2e892448387de4ffcba2c87997c447e8c69bced1f8b8d9f69f5d7df67a1f56b6a1c0ddfd2adee4b4bb4fba48496f089324a8e
SSDEEP 393216:4Zzr7/UoBVqJbFaXeFo4MZICqubvjaUuT66l:IzXMoV4lYZIJf5l
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

collection discovery impact

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
6	raw.githubusercontent.com
7	raw.githubusercontent.com

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Requests changing the default SMS application. 2 TTPs 1 IoCs

collection impact

SMS Messages

T1636.004

SMS Control

T1582

description	ioc	Process
Intent action	android.provider.Telephony.ACTION_CHANGE_DEFAULT	com.example.myapplication

com.example.myapplication
1⤵
- Requests changing the default SMS application.
PID:4247

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control