c6d701287fa8b065989ef6f157b47249866d56ad857f296ccfa2c3745a3fe4a8

Analysis

max time kernel
51s
max time network
133s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
27/11/2024, 19:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c6d701287fa8b065989ef6f157b47249866d56ad857f296ccfa2c3745a3fe4a8.apk
Size

5.4MB
MD5

f9b7d4639b59abb30e0f3489e8d27906
SHA1

15851f7e107976e9ad16d310e19446579b902188
SHA256

c6d701287fa8b065989ef6f157b47249866d56ad857f296ccfa2c3745a3fe4a8
SHA512

ce8d453d0a7680bf287b338e22be6e4d7641838a914fba9dde1a08ff165d3a2722cda3eb24016fbfc206319f07f99f91878490e065ab2ec5e562c65e64e56d87
SSDEEP

98304:+/CdIM97uW4yje5CU6aim/q8HJSZywIcIu/uCcYZN9rBopDkg26i5EFlQMsPfr2r:u29qW4rN6aimywQywIjuoYZN9rBiDkgx

Score

6^/10

discovery persistence

Malware Config

Signatures

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.example.shineinterview

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.example.shineinterview

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.example.shineinterview

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.example.shineinterview

com.example.shineinterview
1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4262

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.example.shineinterview/files/profileInstalled

Filesize
24B

MD5
0ece11568a23009da88d5168de604656

SHA1
b22efc957de3e60f41b2d98171dbb0ecdf0d8053

SHA256
f62a26b75cbd0ac67828d5069c8403a2eb9deafed15f6b9b5b2ea5d14552a99e

SHA512
f1095a2e93acc231c36f0f76e00b023d2c918a45aea14116f8f8312e64ab122bec70e49da5f797957e77c1ba3aa02f8520980a75da07ab33561507b771b2e3df

Download Submit
/data/data/com.example.shineinterview/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
e97e0671a7db4bc0bf73321d8e68bf78

SHA1
6f5177bee0493e4300c4aa6b11c6a85ae93d76a1

SHA256
8b39350abc2ec14ef988573ca0fd6602e701f4b9e66f8ca9dbffbf25285106ab

SHA512
406561ecd9f3e3fe6b2af575287f8a5038e31b0c7a1f8376e61f749469148e9047559b2a29347e2977f9c130d288d01ed4ec82c278ce7c46cf5537c32bcdb239

Download Submit
/data/misc/profiles/cur/0/com.example.shineinterview/primary.prof

Filesize
1KB

MD5
7c1eb4af3f79e9ffeb273fcb0ed8206f

SHA1
c7227d3c1602954cf9a0b322c67dae9e2c3d86bd

SHA256
37820ff872b0ac9a9a6d44cf6f8bb6ccef7345791ed5ad1e02ec45db1f8b4e9d

SHA512
943a5e08723e2c95723f4fde17c67cb1be21ea03e401cadb8576f451646071407e549b19ac607c8c809ab171db1c139a5f77f7c3494fb2917c26120eeb93543c

Download Submit
/data/misc/profiles/cur/0/com.example.shineinterview/primary.prof

Filesize
3KB

MD5
c06c0a0f3fcd9ebf034a3c4e08bc38fa

SHA1
c27531ba90adbb02a3b605f32167728080490f17

SHA256
05db0dfff52fe003ff12df82b24605731f6a09bdecc6c21264ca120982ca8022

SHA512
24666f027f0f268ca9f116b7b8f501059e91a088090d128a57211c7fc8fa3f63fa37d44c90906d5b9f980a20afc77bb3f0db54ec41338397faccdb303f9d05b3

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads