Resubmissions

13/01/2025, 18:31

250113-w6fb3aspex10

14/12/2024, 03:13

241214-dqtweatjhv10

Analysis

  • max time kernel
    8s
  • max time network
    123s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    13/01/2025, 18:31

General

  • Target
    base.apk
  • Size 3.6MB
  • Sample250113-w6fb3aspex
  • SHA256 9d00052eb9a97a53a49c8e1a26138de835e2d354adef44a51ce8fb599d769fc1
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Checks known Qemu pipes. 1 TTPs 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

Processes

  • com.example.mysoul
    1⤵
    • Checks known Qemu pipes.
    • Queries information about running processes on the device
    PID:4355

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        androidx.work.workdb

        • Path /data/data/com.example.mysoul/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
        • MD5 SHA1 SHA512

        androidx.work.workdb-journal

        • Path /data/data/com.example.mysoul/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 cbc1231129592bec7d83584079bf9115162bbd91f692e9fecd58c2a87e016b3f
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.example.mysoul/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.example.mysoul/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 4c4acd56d6d3b634d6c59b0e69ffee08c1866e3e30a8dd9d82805c6f7af4ec16
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.example.mysoul/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 af06df437be80af4cd644c91e005d4207b2cb23429fdbfffc943a41a45d7addd
        • MD5 SHA1 SHA512 SSDEEP