Analysis
-
max time kernel
7s -
max time network
847s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
23/01/2025, 13:45
Behavioral task
behavioral1
Sample
Magisk-v28.1 (1).apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
Magisk-v28.1 (1).apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
stub.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral4
Sample
stub.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral5
Sample
stub.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
stub.apk
-
Size
28KB
-
MD5
6e60f93f787094b70f74a9674f9b58c0
-
SHA1
ce19e61adc6f3309cff860bb5b85a1edbf798beb
-
SHA256
dbd4e7b16ea57e296e317fde762f58ff51000b020d819c16d2338cd667ff6e08
-
SHA512
79273cd63dcef835f0d8ad87daaf8cc7a947d83bfc03ee0b44b8857de5126b5731d29241a1cb75692accf52c734b1358ea8ed8e27278ea77a3c4bc40801d9536
-
SSDEEP
768:YKMElhDzYvjtf9tDGkj0xr3wdI0jBUz9Mj:d/jMvpj+Gcz9C
Malware Config
Signatures
-
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.topjohnwu.magisk -
Requests dangerous framework permissions 4 IoCs
description ioc Allows an application to request installing packages. android.permission.REQUEST_INSTALL_PACKAGES Allows an app to post notifications. android.permission.POST_NOTIFICATIONS Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9KB
MD5a10b20a854ae1b459822145f34066911
SHA1c36bc5ef4bf869eca7d03949c96e43b6f971b236
SHA256392fd3ad3c41c2689908dc19ec5d8304344ccbd6709c644723443172c1c0dcad
SHA512184d5b2c2272811708b07e5f956f2c9ec53496d2de4c75692631f0f656821293eed643a1b026151bdb98e5705d08bbdd7de072dec1a56b4d9b6657c172f6e566