377f07b92d33e0ea9d7cfe3c288e19df2be8555154bdb1141b82a87d068a0cf7

Analysis

max time kernel
32s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
20-12-2024 16:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

DJP.apk
Size

3.7MB
MD5

8bd1c057de789baea3d0acad35a4d1fd
SHA1

09692ebecc03862c8223a43e0934fc7e1fa6c06f
SHA256

377f07b92d33e0ea9d7cfe3c288e19df2be8555154bdb1141b82a87d068a0cf7
SHA512

6d4c33afd728d8bdd9ec2ca69554efb3c21370b755812a27b4e5c24aae2e39577b5f0b4aa273ce9dab09b9421bd50c528cf25c6f438726211c757cd09396b738
SSDEEP

98304:p1y8VfJ2nSi+s+OZm41gFvWMfz/L2ci5eR:Hy8Vx2ndLIWQT2cweR

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

evasion

System Checks

T1633.001

ioc	Process
/dev/socket/qemud	com.example.mysoul
/dev/qemu_pipe	com.example.mysoul

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.example.mysoul

com.example.mysoul
1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
PID:4252

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.example.mysoul/no_backup/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
f4eeca7338c1e33362318fc47dc65a96

SHA1
11104bade12c850a024f9f882d9b7060c8d9125d

SHA256
58813bc91ffcaaca7f6bbadcdb7c747f50c9ca471d108699c7d509a3fe6e8cf7

SHA512
59b98008f48e504d8f10e12a2e33cd35a1030e4636e6a8c6800b2dade69eecbc73ead03ca182cc64476100f8a09955dadca50c332cbb33d1411eb8d631c667e2

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
76a6996d9011d9b37f1842dcb37018d1

SHA1
ddf48bdb2cf5c52ce2dfec7fb490cd0304f7a50a

SHA256
cb2879f45dd191eb22bad8f57c5f5a56358866577c3aaeba599a504b25af4a15

SHA512
0b6437349886c2ec7d05c4e8f5b4b05084caaefa972149a28dac4f257065d056bad5b48f88763f554267f164f9a55e21455c05b17f6f34aeb3494c00f1196a06

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
69f16345218b7fc6f1c1d5a0f2501a6a

SHA1
22e8b7a5d0d09917b7470fc4712fae341d20f723

SHA256
1e0687b2eeed91b1eb20c174749ded64c6ff9064120da49b24511d312b75b67b

SHA512
156bb7294451def5b1b1d69849b8185b56199292597661d126a84c7056a2c36bfa29a2390ba9a8fa6f540e622292b73b878d6b59775438e547df261f1a195b48

Download Submit