Analysis
-
max time kernel
107s -
max time network
132s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
-
submitted
07-01-2025 11:19
General
-
Target
base.apk
-
Size
3.5MB
-
MD5
d3dc0e8a0db31899df2a09e95041cd5a
-
SHA1
2e946eb2cdf0fe428b57dc72f20d0cbe23980a4f
-
SHA256
1c15920c729c30cb9fc758e7993515a006e2b86829a1136c5b2d875ae3a4e3e8
-
SHA512
157d0ddb9a88a518fdae71f10b3269cf9a3f245ae2b4727f932f777d49aa08e75ac9efda211433e2af86fb3a9deb91c35938d4b8cfe420f5c1bb4aaac32689a1
-
SSDEEP
98304:G1y8VlJ8Y7H8/jRRb4A1RtZLrqOfLDcjzg:Ky8V38eH8PbptZL3zDc/g
Malware Config
Signatures
-
Checks known Qemu pipes. 1 TTPs 12 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Queries information about running processes on the device 1 TTPs 6 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Reads information about phone network operator. 1 TTPs
Processes
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Makes use of the framework's Accessibility service
- Queries information about running processes on the device
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD56d8ab4a6eb395810c85933b85ed371f9
SHA1b89b4a4324606b90d0ef1976d632ef4a92aee226
SHA256f7c2f3677bcb6ac0bf8bf3a517aaff744421a4658594cdb9498fbcf89ae11d49
SHA51275061777320e474f2b1e155519134b1c9e41b857463607b567c84afbe396d3eace1111d972473d7e81a1e8ecf33dbfdef2985cb0c46bdb3e0ba1e99a42d29190
-
Filesize
108KB
MD559beea49e24600716a2aff9db67b4fe2
SHA10139980e434ac5e33289bce21a3391a6fe37d7b0
SHA25600e3379d9c8e95d2b9b3833ee89efcc40c2d79cf6011aab179b721f784395580
SHA51245a4eb3312b466c758f810aae496d5e8bdd90952956461b8fe9a3443f4ba5cfe15b7effcd0b8d8430ff461829ce2591602a847f1b127f178c30666a13f733e4f
-
Filesize
32KB
MD51ee3b1b794a889ff263a05741470df3b
SHA182ad7b6ca704d349e8c3498576265413c9cd6630
SHA256209e1cd32129adbf2958c7388f5fc5576fee620be3c804e57e28f7800272c460
SHA512a0cfe7561f6c5b7811df1ed8939cf67c3d3d9652ef3e666151db1782929c98450d3cb86a7ef5bef29f84f3c9d385be0c006527fddcede27a18d1f77beacf65ff