044f60cf9fa842073033081f2854874178510c5e6ebc9a4635cead3dcc12f5d3

Analysis

max time kernel
31s
max time network
155s
platform
android-9_x86
resource
android-x86-arm-20240910-en
resource tags

arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
submitted
22/12/2024, 01:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

377f07b92d33e0ea9d7cfe3c288e19df2be8555154bdb1141b82a87d068a0cf7.apk
Size

3.7MB
MD5

8bd1c057de789baea3d0acad35a4d1fd
SHA1

09692ebecc03862c8223a43e0934fc7e1fa6c06f
SHA256

377f07b92d33e0ea9d7cfe3c288e19df2be8555154bdb1141b82a87d068a0cf7
SHA512

6d4c33afd728d8bdd9ec2ca69554efb3c21370b755812a27b4e5c24aae2e39577b5f0b4aa273ce9dab09b9421bd50c528cf25c6f438726211c757cd09396b738
SSDEEP

98304:p1y8VfJ2nSi+s+OZm41gFvWMfz/L2ci5eR:Hy8Vx2ndLIWQT2cweR

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

evasion

System Checks

T1633.001

ioc	Process
/dev/socket/qemud	com.example.mysoul
/dev/qemu_pipe	com.example.mysoul

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.example.mysoul

com.example.mysoul
1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
PID:4339

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.example.mysoul/no_backup/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
0f73a599940594c8c145780632285a70

SHA1
bcb0081cc4f607c8f2cc131e754c2e2a2506ffa2

SHA256
8bfd112dde6803b565b5f881e241e1bc0294e21c823d7b5b941f5227c09389ac

SHA512
1a1ee7969af724102b021a2554c9d576eb35473ebeb190d29539c5d9069579d675c6d835b7236449eac4122059f56dc343c35045dc16741995f872d032e7ac4c

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
2c141e7078ca4a3810ed08e166cd1cae

SHA1
09e1d4d4271f298128986fa5b0724efa3be69fd1

SHA256
32f5efdaf61423bfe446c0b6f63d28249fb3e1016cc84d5753262785cd15c349

SHA512
68c459fe238b8d72a9c509aea38ff47f922c620786bce2bce6d54bfd564ed05f625113fbfba7994e73126840397c54b51a7abfa39a01a73f2e8e5ea697088c0c

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
846b288505fab28669c76fde9283c6c1

SHA1
6000b28b5a4070e35191ce864883172857810cf6

SHA256
55d4a3a63b4bbf8ecdaa2535ad3f1048bcdff06b95e97df6528797d6d829511d

SHA512
79434690661abb32d2813ae7fc15a8cf3e1b02a232f1ec82c7035af9ee488891cb314aaf940b83d81eda070bc23b5e4b349087cf781bd54326b00989433eb21c

Download Submit