Analysis
-
max time kernel
128s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
21-12-2024 02:22
General
-
Target
377f07b92d33e0ea9d7cfe3c288e19df2be8555154bdb1141b82a87d068a0cf7.apk
-
Size
3.7MB
-
MD5
8bd1c057de789baea3d0acad35a4d1fd
-
SHA1
09692ebecc03862c8223a43e0934fc7e1fa6c06f
-
SHA256
377f07b92d33e0ea9d7cfe3c288e19df2be8555154bdb1141b82a87d068a0cf7
-
SHA512
6d4c33afd728d8bdd9ec2ca69554efb3c21370b755812a27b4e5c24aae2e39577b5f0b4aa273ce9dab09b9421bd50c528cf25c6f438726211c757cd09396b738
-
SSDEEP
98304:p1y8VfJ2nSi+s+OZm41gFvWMfz/L2ci5eR:Hy8Vx2ndLIWQT2cweR
Malware Config
Signatures
-
Checks known Qemu pipes. 1 TTPs 12 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
-
Makes use of the framework's Accessibility service 4 TTPs 2 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Queries information about running processes on the device 1 TTPs 6 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Reads information about phone network operator. 1 TTPs
-
Checks CPU information 2 TTPs 4 IoCs
Processes
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
-
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Makes use of the framework's Accessibility service
- Queries information about running processes on the device
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
-
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Makes use of the framework's Accessibility service
- Queries information about running processes on the device
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
-
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
-
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Discovery
Process Discovery
1System Information Discovery
1System Network Configuration Discovery
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD57862f44f430ba257d8ea695d68006237
SHA13d42e8701f96cafefbe167769f113d015bfe580a
SHA256dc1dfc0bff5fc5aac1001d61bfec91a13f63522cb9decb00a90b88d2a4787751
SHA51265602249d620fcf0a246a9fec58e91b3f49a0d2d16b49d32fe848a01caa70927c3fc6233ef063ab8d696b5b50b209cd9e0015461717311fe5e221a28dd2caa4a
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
32KB
MD52e52b609d35712c710279aa3c5f49397
SHA198e3bf61914cb49c11399f5109cc477a9e1cd6f4
SHA256e2c561c011ec617c6b5fa36d9b06ac3749e65e23395aa8c5b30e3b9d05a8fb0b
SHA5122d5f6aee3e8928c8f5690b662fcd291a3a3d70fe10724df98c61de8c8a9976d26e23a6c56c6ce6523fbdbbcc9670ab1efc4e26385a0f08f6eda96e86f55018da
-
Filesize
108KB
MD54670505763730efedb2efb30f63df6ab
SHA1ac084f8bfa97d1caef8316195ea73c58f92fb32d
SHA256bfb2aae19aa86136c0ea7455ba6b3c8cecf68f53e60131e931abffcbd1ce2d41
SHA512c2505499a6f7901f4da1f8f453baf94b3d14e2f9e8ccd07e412f29e782ec98dadc601ac909bfd536c6e42ad332931552a91f92b57a544a0b6120b21c36b3de54