Analysis
-
max time kernel
127s -
max time network
132s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
08-01-2025 02:50
General
-
Target
base.apk
-
Size
3.5MB
-
MD5
fa8d37206d1d58c9803a01aca091a40f
-
SHA1
31d828b8fc6d0286eb2cb56ff49a464ecaf4c4e4
-
SHA256
2bf76945694c257d9bb1533c70075fbabce2d8671b476b7478421389ed258980
-
SHA512
f711906fc415bb67c1820bbf1b2f07cbc7d3a5ba59ddcbc1d94e3c490dd4bcdd9949ad4e68681150d627394de93a37fda2a02cf01aceac14f9db602656cf6371
-
SSDEEP
98304:D1y8VlJ807H8/jRRb4A1RtZLrqOfLDcjzn:Zy8V386H8PbptZL3zDc/n
Malware Config
Signatures
-
Checks known Qemu pipes. 1 TTPs 12 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Queries information about running processes on the device 1 TTPs 6 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Reads information about phone network operator. 1 TTPs
-
Checks CPU information 2 TTPs 3 IoCs
Processes
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
-
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Makes use of the framework's Accessibility service
- Queries information about running processes on the device
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
-
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
-
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Discovery
Process Discovery
1System Information Discovery
1System Network Configuration Discovery
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5f6b09cce47cbce4399fa3149f5c734fd
SHA17adbf7ee83fda3a789441a1ebed18dee80f7bd23
SHA256b281c48c705fefded044ba829cfc398d2862c1500968f4951e68a97abbc02726
SHA512cfc2bb543bae8354b9e6a7348a50b193f0ce4b98578928c88bed51e9ed5ffcfda34127c971289151c6402b6448918d758b950ed457cbb82bc96087e8e444e6f2
-
Filesize
108KB
MD528cea4ca7384d826376beeaeed844b07
SHA1592f303b18f65c3eb471be8f9a6102c46d7d1307
SHA256504cc39b74ec62b843503dc4119f8332926ebd3d87c3f034024118603eb0bc7b
SHA5124b343facafd9467b58a2ee59ab715c4050467489f5afd45ae8918e6011a3970f3e3b32be27674814d4c3a776e65a5c298f699c3743ab52bbdb36e67c3b1c1073
-
Filesize
32KB
MD53cd548c6595ce315da2dbcde6f9afb46
SHA16ad1af6307953b96ba424ecfe316e773a216948c
SHA256def540f21a04ad7ab498ffae6eee70e3977dd3200d30f20acc230bcf78c7f455
SHA5125c264c50705f8b5478ec16bf10a838e4ff007049642cf684c6089b1686d8b43032ffce521310f7e3de998311d810d1f01c520cafd1d26df7b8079f649574759e