Analysis
-
max time kernel
127s -
max time network
132s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
07-01-2025 11:19
General
-
Target
base.apk
-
Size
3.5MB
-
MD5
d3dc0e8a0db31899df2a09e95041cd5a
-
SHA1
2e946eb2cdf0fe428b57dc72f20d0cbe23980a4f
-
SHA256
1c15920c729c30cb9fc758e7993515a006e2b86829a1136c5b2d875ae3a4e3e8
-
SHA512
157d0ddb9a88a518fdae71f10b3269cf9a3f245ae2b4727f932f777d49aa08e75ac9efda211433e2af86fb3a9deb91c35938d4b8cfe420f5c1bb4aaac32689a1
-
SSDEEP
98304:G1y8VlJ8Y7H8/jRRb4A1RtZLrqOfLDcjzg:Ky8V38eH8PbptZL3zDc/g
Malware Config
Signatures
-
Checks known Qemu pipes. 1 TTPs 12 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Queries information about running processes on the device 1 TTPs 6 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Reads information about phone network operator. 1 TTPs
-
Checks CPU information 2 TTPs 4 IoCs
Processes
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Makes use of the framework's Accessibility service
- Queries information about running processes on the device
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
-
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
-
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
-
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
-
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Discovery
Process Discovery
1System Information Discovery
1System Network Configuration Discovery
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD53a8b79e70c65d9341f913ebe4ea320f8
SHA1cc23a014d0f9bd46b41b374118efdb2edcb12e23
SHA256518d2328c4d43c21ebe5940fa3bf9f74719f9376a4c644af0970b3e56b92cfe2
SHA512bf9df37f61028353168cb6c4983d78d6b83c1ae0126c81495a2e28fea2f580961097a32a2c12f909a07aed6002001dfbedf5647a3e4d46534716020c065d7678
-
Filesize
108KB
MD5ae06edbf02820dcab970b2271eefa1c2
SHA107beeb2f1900062ac3b4df6ad56423421e123552
SHA256ec04d9bc70affbba93376144a5e017471b40dbf52201995c1aa5019ebd453f32
SHA5128a18309d72e6f8b2ef570ab8b901ea829f1c15a73f731e85b4cae1ef2e53a53fd377f70db975b8fe858cf51c274eaa748e4113763d64152764511d5f2a9193b8
-
Filesize
32KB
MD56f57cb03abeb7618ff153cfaffee614d
SHA16b598033ce32b537bdcec5c053cfb5a920753095
SHA25644e4a1902a28b943cd64cd171c12f0e6eba3948d951815465c0d5c6dcdf0310a
SHA512b828ada073b3a679cc1e57f50dec8bf612826c39b668177cd64b147c947e2c8a159f952e005c4bb61a662d1dbfe7064872506c9b887cba76fe0506d2f51dc8bb