9407781d7c879fb2137dcfff516829175451b265e8460ce151d9a2598945fbdc

Analysis

max time kernel
32s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
25-12-2024 22:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9407781d7c879fb2137dcfff516829175451b265e8460ce151d9a2598945fbdc.apk
Size

3.7MB
MD5

10f04e1c2e835741a8017b3268b3d989
SHA1

ef33c3361818ef276b8b118d19ddb3efc2fd286d
SHA256

9407781d7c879fb2137dcfff516829175451b265e8460ce151d9a2598945fbdc
SHA512

afc31acb61583ebb9d14fc22741ccad0edd660f94f9110e8723beed6475d94dccc7af4a2595c178b003ce5fdf1af8e165dda4476cc58da0f88ed02fb3cd95931
SSDEEP

98304:x21y8VfJ8CrKW/St4EI0PsOW8wVJKXMGYWQoZryLNcjtc:Iy8Vx86Km6PswsKXMEBZANchc

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

evasion

System Checks

T1633.001

ioc	Process
/dev/socket/qemud	com.example.mysoul
/dev/qemu_pipe	com.example.mysoul

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.example.mysoul

com.example.mysoul
1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
PID:4264

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.example.mysoul/no_backup/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
3690acbfde4857a45964cf7d77da8a77

SHA1
f94c0a370e12d2091669ba47f0df75dd32b19ad2

SHA256
0e0d8205afd0314af4f3014cd7df09f2d22718e8663ed35f69d9fec6e174fe50

SHA512
9f4ad2f58a83eb30f3867c9d582abebb60495497ac6006676f64a57453dd45b6cee93971f554a8ef09035d55c49777fcb4cac0b2012ad8f6e548bb4435de7e9a

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
c536cc9940f065ff72a50de430e06b61

SHA1
9435ed808e532c63e20496045e425f4da72dcc97

SHA256
2063b755e50558a13ab44999292461cb47e5e2f5af95c1c071e72b5188adb246

SHA512
35e360964c964f3bfa538d5a3fd0049f894415f02bec5173f410d665098a2ceb1494f7eb0370699fbe6a06054f42229b5ea51da9c3a4c5db5337707bcb5d685f

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
4bfdf61609d3c84213d252ccf73a2dd7

SHA1
73df671e92286e90f70623b8d92b04d878386724

SHA256
ec3f6082f0f918c04f409d94df8975a4f41668c95a6d13199c4ce12091283fc8

SHA512
ff8b22f572cdc5e95055fe4b85ef66198593e54fa7558e11aacae09210cea854cb9e36297d1f98e08e6c5b5f52b5fb22ee6308b335afbb76d703eaaa2f02be42

Download Submit