Analysis
-
max time kernel
110s -
max time network
119s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
13-01-2025 18:31
General
-
Target
955afeef640a6f5b60a086a6aead06e48277fba9d070997ba3d2a52a5e67d04e.apk
-
Size
3.7MB
-
MD5
d58d219972f17bb294f45f5a4b8e2ece
-
SHA1
d108988a2b621de10fe4c3400417368760dda771
-
SHA256
955afeef640a6f5b60a086a6aead06e48277fba9d070997ba3d2a52a5e67d04e
-
SHA512
65a83742b04b37e69c841e643557234ff38223571fa74ea0ff8cf7368d73718c83c4e79831b543fa24de53ab37270d34aab9dd482c5a4c0211757b56a6c0d718
-
SSDEEP
98304:B1y8VfJXnGiJJuKFvD78msuex8dE1MrCVwLkci5jq:Py8VxXnGiXuKFnoaOurCokcwjq
Malware Config
Signatures
-
Checks known Qemu pipes. 1 TTPs 12 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Queries information about running processes on the device 1 TTPs 6 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Reads information about phone network operator. 1 TTPs
-
Checks CPU information 2 TTPs 6 IoCs
Processes
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
-
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Makes use of the framework's Accessibility service
- Queries information about running processes on the device
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
-
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
-
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
-
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
-
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
-
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Discovery
Process Discovery
1System Information Discovery
1System Network Configuration Discovery
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5c17f36faa83c39a00e835158d27691ec
SHA157305780b349ea32dd6b6beacae5a9474833bdae
SHA256751ba2e958072c802f3918d3f73386b428889b241ce148bb7a5fa1f850cb02bf
SHA5121492dafcbbc91bd62954ce1d1a1a6d532797d2fb07893f551a50c1bba82392d3d51e033072b3a4fc0036c198e6348a1b6241a2f2662c14f3591848e4a976575d
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
28KB
MD5d257d672c79624b67f9362789bfb2590
SHA1ad037eae721f0848798c5ec0d4952a9b82b266a5
SHA2563ace41ed9b126c9dfe72cb9dbe6d04dae4607248db2c681b48ca5199c39f48cb
SHA51278c51ae665fa0f500a2fdbd7e29038eeee5c4197380d818d15b9f163ed6f7cdcee8658d8de999ac18c7821d0ef804ec8e7ffdcaf9aa663722934b43b579ef279
-
Filesize
108KB
MD55a18cdadf136806fe15c821290bde2b0
SHA1427b57df3fa48d0cfa0fede84eadbf2ab567abc6
SHA2568bb0b3806bc32f03c0291ac203793e089cb7625044157773a4c31f1911caa43f
SHA512b8de9155088387927f75445b6133d2cc2bd4679a90206172192240fccf19205e54a10b726a0cc84d7009288ef5f15480d62a0e5e005675f88bfa6e03661a9075