Analysis
-
max time kernel
148s -
max time network
132s -
platform
android_x64 -
resource
android-33-x64-arm64-20240624-en -
resource tags
-
submitted
29-11-2024 12:16
General
-
Target
BlackMart.apk
-
Size
9.0MB
-
MD5
5909be3db980803493a09350bf381fd2
-
SHA1
f18c88bb6705a97f8878e5cd685bc06275c42c23
-
SHA256
e7fe5cae5b5a5561e3aae30996e1c23bae6a16b8fce29865dc06aed1c1924c47
-
SHA512
768df287ae6094f59e2eda2edaa2e5c30d687f4f379527f883d970e11aa3c72c71efb540385e4d1961de5aaad1b6ab23c370b260ce654be268c0defeeaa84ea7
-
SSDEEP
196608:Lm+dMwZ+dMwT+dMwS8+dMwF+dMw6o18T4KUue9Jh8MG1ll:LmqMwZqMwTqMwS8qMwFqMw6Qo4Dtv25
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.velociraptor.raptor1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Makes use of the framework's foreground persistence service
- Queries the mobile country code (MCC)
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Enterprise v15
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
36B
MD537e8e716e0e2f4a0b05cd9571d95b84d
SHA1f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA2567080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
SHA512e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6