Analysis

  • max time kernel
    50s
  • max time network
    155s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    27-01-2025 02:34

General

  • Target

    adl.apk

  • Size

    3.2MB

  • MD5

    3b371c5b773359cf03949563caac51db

  • SHA1

    13d491930bc5bbde8d395096b8a324cfff17de2e

  • SHA256

    8e50eaa8ce2003d20c1f365a0b10357dc7df10c497257cb6647e2c4d9e2b5072

  • SHA512

    b5874a0305a4e4cddaa73244123b905115d6c7b29f86cf6ccc4e88ba5acdcf563cf2231dd7783c401081c7566a553fe754c201d55cc3d62a46e3a6c3fc221c01

  • SSDEEP

    98304:pabIskjguTIFQQzmNS5odWnvScSnUrhst9:wbVkjhJQzmNSGW6D

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.ss403.app
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4965

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.ss403.app/files/PersistedInstallation1728161199391738976tmp

    Filesize

    564B

    MD5

    5896f56fd630ad4566b09936c0b6ede9

    SHA1

    2f568a48d123645e9ad83a97e26ba2cdc7632e42

    SHA256

    825518ade8f4137f1e66a847bf1d50ccbd6780f9cd2d6150a1c92ffb83f9e96d

    SHA512

    6dbde7930eb90b1f0a1b37690070a456cf855f111c29dbfd78f2c9344314026028b52ce440eb439410bfc48d8fd180006212fbf06122c49aadd5b37eac34484b

  • /data/data/com.ss403.app/files/PersistedInstallation5094109040041554017tmp

    Filesize

    90B

    MD5

    73836680b81884ff17a721fe83a057a0

    SHA1

    ae6468e3195b09c9585bf2a6b61e350a71acc5ba

    SHA256

    259fc365dcb21678f305051a45bc6b11de56744563848094be188c31d44dd2d5

    SHA512

    b21c8ca69ac017e288cd95d39819b807b9dc3894fd10ea16731f51aca20a59681069cd248ecfac90599d73d8f746a582722e2397559203dbb163df3bb3c42470

  • /data/data/com.ss403.app/files/profileInstalled

    Filesize

    24B

    MD5

    c624fc1a81d00111fb16b7ddddea967e

    SHA1

    7a3321871e536112f40e973e71f4f7d7275607a2

    SHA256

    8ac44bd042bb5cbac091bf33ec6c68ea3ca2a1798291966aa6c7c16250a09e4d

    SHA512

    72f987b64e483cdfdfd4179c3b3d52dd5034d789482b9f6d0e8f1dc644e9d6e4f04b12eae157bee1c4526407ada75184e42610adc949653ea837f51eb918dc72

  • /data/data/com.ss403.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

    Filesize

    8B

    MD5

    791a51637ec6ac8a6b369a6d4941c5c4

    SHA1

    bbcb9e262fe33581c5abf9365cdd7c8324002fa8

    SHA256

    ab290051f6a1145a9d092912adf374dd35810289e86c4cec4aa9c7010ffcfc2f

    SHA512

    7d3bae741fe0a64eabb20da9c16d9229ca344a9cbd94039c26f5dc7ab9fb000293cf048356e6a8866583a2a872133c9fbad8d8c68da88f994a5503c50480a5a7

  • /data/misc/profiles/cur/0/com.ss403.app/primary.prof

    Filesize

    1KB

    MD5

    33614a6fe416eb1153b9f1a046919432

    SHA1

    ce76b9a3b80e0763b1e0dac51885b1065404d6b5

    SHA256

    0642f7d080f9445877e6caa049f557085a3273b563b488de987e8ccfca135734

    SHA512

    5c0794414cce930c7d080384cd20ad8de58dac95fd3363441c0862f9ad3fdc3793ed4ecd89e16ab53b0ad0b149f3892255e5b8485bf6165a328378f72b9d7d38