Analysis
-
max time kernel
13s -
max time network
34s -
platform
android-9_x86 -
resource
android-x86-arm-20240910-en -
resource tags
-
submitted
28/02/2025, 18:54
General
-
Target
base.apk
-
Size
3.5MB
-
MD5
adc5d16499c92152a1b96f97edecf63d
-
SHA1
35f9c75df79fbd36e89e65e99463bccc62988426
-
SHA256
8e5051ee23cb01c25f0adcee6475f4fbd4cff15edaf08c7a81676ced4bfbbd39
-
SHA512
fd57f7d4e43bcb38469980b8b23a1e38122f3634e461cc2b50a187cd7e5e3560e55fa8c2e7f74625ca9bb59730121889b439cc03206126c9334164c5cf36e80b
-
SSDEEP
49152:pgWoVs7LxArmZtZqKD0LSNGUNog3SFI80X6Qpd2x6x8MbsCnJMzvvS9jz0o/nq:I67LxA+DqKD1G2FxNAx6x8vrLYjQt
Malware Config
Signatures
-
Checks known Qemu pipes. 1 TTPs 6 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
-
Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
-
Queries information about running processes on the device 1 TTPs 3 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Acquires the wake lock 1 IoCs
-
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
-
Reads information about phone network operator. 1 TTPs
-
Checks CPU information 2 TTPs 3 IoCs
Processes
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
-
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Makes use of the framework's Accessibility service
- Queries information about running processes on the device
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
-
-
com.example.mysoul1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
-
/system/bin/cat /proc/cpuinfo2⤵
- Checks CPU information
-
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Foreground Persistence
1Input Injection
1Virtualization/Sandbox Evasion
2System Checks
2Discovery
Process Discovery
1System Information Discovery
1System Network Configuration Discovery
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5aa56c9084f32c00985face6a4f3225cb
SHA1dc9cb96837ea00e85c0c8c00221d1485a86194e5
SHA25660c864d4b80047ac86912cb09742719a156c9ddbd535ae1b5f27947b5cf55b2e
SHA512e7c1df5fdafd2eeef4ea96547c2cd02a17bb5f514ef8e92875a50cf226b216318b045b57763722bf32da80780701d22206abb7b587aab1651dc77932ff788781
-
Filesize
28KB
MD5ace86f170b924b9eeee37386b5ef0283
SHA11b9906333c8e31aaee422edc3f8378af31949203
SHA256cd3db5961ac5ec3f86a113f87316c0e1277ec843bf58fac616da5a5bf62b6273
SHA512be6f0dc4346ae6171a1135572865346e48ccd0e71980455cc5d1339151d9731743975002c260149bc58db36d4342d4c40e5e6b8c8c698a261faf2572f339a4ed
-
Filesize
108KB
MD5abc7ef0bb1705fa0bf129fde37680eb2
SHA171b74ccdbb8132412ff0366e83297c719cb14a60
SHA25636770602aeb026e742ad7a96e1d96c64a14cadd36e27a4ccdda5a3ff209077ca
SHA5121d38482c91b0b0ffd350bda1f6e31941fffdbf9615fd30a8061878b7938928fd44149c9311ea39fda83add97a324090fe1f3d07bd45bb30a77077bc5c482e6f0