e40dc70d94e13e7fc1a58c9b940591bc01c1c37641f2ee61737c7625aa467c02

Analysis

max time kernel
31s
max time network
151s
platform
android-9_x86
resource
android-x86-arm-20240910-en
resource tags

arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
submitted
10-02-2025 17:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

base.apk
Size

3.7MB
MD5

7531efaf77378e6969b2793ff5a81913
SHA1

9ffddafba7932be8925a120104fac84ceb71a071
SHA256

d40e45359546cb801887a38d4adb397327ce4bf0a166192f5f72165471fff10d
SHA512

acea2e24c2a19ccda810053e22fd46fb33490128f7d0a2560f353c70705608054f11afb1caf8aee2fd0d94746441081ad3503b636df4fe7925b11cfd1a364429
SSDEEP

98304:M1y8VDJ8nOjywaeY+La5UYHhQewQ7fLDcjzY:4y8Vl8OjIgOqYHmyzDcnY

Score

7^/10

defense_evasion discovery

Malware Config

Signatures

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

defense_evasion

System Checks

T1633.001

ioc	Process
/dev/socket/qemud	com.example.mysoul
/dev/qemu_pipe	com.example.mysoul

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.example.mysoul

com.example.mysoul
1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
PID:4212

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.example.mysoul/no_backup/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
b8cf0e7e81ef628e7c2e4cc14e434153

SHA1
58068248ffe091b2a1ff6772193caf18c2e87164

SHA256
e83c578d11b4e12dddb056acfe8fa0e98a75c1258a7e0b995b566519402b1fc7

SHA512
eccd521ce0cce87d5d5792c9116fc2581aa021d02350b925f4712b3aba7e29d973ada677c562f4f6d33b1fe5d2eb91e7610eac5369ed995c848031ea461b0e94

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
025a1b7ba655a0b0a30453d0784a0f21

SHA1
7b9c76faf925ceaf6ccb3fa251d46f57ddde7ba5

SHA256
fc30c41c46dc499743e270851ae93e7b46c48a380f0207e0ddc8ebe4f8994241

SHA512
cf960cb0582b6302ccceae345ffae5c40808ec3ffcc97c0a993e85c275fcf183f78a8e7d060b16cbb44af7134ef110dbe5dfd27c2b57e6788dfa20fd4b69d683

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
0f4155e87a7bde0bc7283d6923919ccb

SHA1
8630b2f8d0a4d4339fcfd38351ea1d4e441d802e

SHA256
e06cc9485b064e6f3ad4d6bae3c8b1677e906f9e5be775558641e9ce127dd307

SHA512
10478b71e3c625ed8389b69c0734afa0c1a10f27401ca2fb7e19c9b56bd970786fb8334bbe3c8502837cc88069ec8f5583cfafbd28f4047914b214019685d966

Download Submit