Analysis
-
max time kernel
21s -
max time network
132s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
13-12-2024 11:32
General
-
Target
base.apk
-
Size
3.6MB
-
MD5
aca88829c5a7c2f7ab8ae928f3df9fda
-
SHA1
2ef0057ce7fa7d3c27d894b5ee0532a4b9f62f10
-
SHA256
9d00052eb9a97a53a49c8e1a26138de835e2d354adef44a51ce8fb599d769fc1
-
SHA512
44982081663f363769d16f667a229a36d2069678cb3177ce4e45e299f424566f9eeb71779afed2e93f67ae3cbcf04cd8b3c8b736f4981f5a937ce08392770fbc
-
SSDEEP
49152:+bgW8wiy8Vp7mZtgAWDGo2ZO5eAgBNx6yyhfYPdIxAH0fRnJfzvvR93Ueg6b/4o:+W1y8Vpug3t0AUyhQ2fbLP3hg6R
Malware Config
Signatures
-
Checks known Qemu pipes. 1 TTPs 8 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
-
Makes use of the framework's Accessibility service 4 TTPs 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Queries information about running processes on the device 1 TTPs 4 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 3 IoCs
Processes
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
-
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Makes use of the framework's Accessibility service
- Queries information about running processes on the device
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Makes use of the framework's Accessibility service
- Queries information about running processes on the device
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
-
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
- Requests disabling of battery optimizations (often used to enable hiding in the background).
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
-
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD57555c9ec6e849b814a8dfd307d048a8a
SHA1635e8b6150e86ce1c549c240c4fab18d099e8172
SHA2560ec8d2363c6121735bc659b14efc6c63c5eafad654bbe416746c7fb645017ac7
SHA5125ec176395f1ed25021dc73ee23d6e55cd4b3583a177ff4f182d0b43ada414027902c726d87f58efb514778ffc1e1b6b6fe3627247f134de639ec4bc34c5c466c
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
28KB
MD5079939423b3881217bc2fc23e79115fe
SHA17956420c8beba6d9d8d08a9653a37792cd1d62e8
SHA256754e04cd376908648653015455ab97b2cbebfe7c3a59d75bce7d53443047feb6
SHA512e804281c76055fd5bd4b84fa08eb850f7b07b36dba2f8361b5340b68815d9d51c8438019764e305869984062f008f416bf1200fdf4e091fc047cede6a12509e1
-
Filesize
108KB
MD55ee43dee7dbd6dbb1e8a886403f554ea
SHA1ccf3ed6b67ffdc5ae44f413414b1a7e2175ff19d
SHA2568bc566e61ed8a3891c8daddd7a1cd61a96f28ff1da9394da5510bea63e2fdff7
SHA512efe3ae469b35ebb4da7a56bce8062cb5615b31b030863a6176a26dc701bb5ac1e326a836a9c15a07dab7c0d534daabf900f12f7b6299867b97259d00d49b8429