Analysis
-
max time kernel
149s -
max time network
159s -
platform
android-9_x86 -
resource
android-x86-arm-20240910-en -
resource tags
-
submitted
09/03/2025, 22:01
General
-
Target
f01e810de599c765983c775bbbba1b18c14abab61fac8459321fd215a52672ae.apk
-
Size
3.5MB
-
MD5
5575425d89794f40c72e1f388853df09
-
SHA1
7d9c4f38514f2cff9ba23a653e292ea2645dd81b
-
SHA256
f01e810de599c765983c775bbbba1b18c14abab61fac8459321fd215a52672ae
-
SHA512
ad0c8ae07cb21672b094729b6dd02a9eb7e1faca896ea75f3c750fe3a6a945b2f71161ce30a808943a0ef1a49e670e1383049da295543feec863f5c127848b6d
-
SSDEEP
98304:Q0xGhvwDqQ9rFY2mhXKHpBUpF5sr8Tgkbd:bxG6DqYfHCnTdbd
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 8 IoCs
-
Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
-
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 20 IoCs
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Requests cell location 1 TTPs 1 IoCs
Uses Android APIs to to get current cell information.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
ru.strcupas.wmsloloxs1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Checks known Qemu pipes.
- Queries information about running processes on the device
- Queries information about active data network
- Queries the mobile country code (MCC)
- Requests cell location
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Enterprise v15
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
272KB
MD5c83cbce725baaa4089fa883fea399e65
SHA1c580b5892913dbc67cf35bda7f4972e794646802
SHA256997133ec0ea05d7b462f0d5875ed2b991dd26cd41acb9ff9a4fb0d745395f91f
SHA512273e891e44d44ca0af7ce1ae3ecca12d43170ebb37c28eb368fa67b46324f0854671323b02c18a096c0c2bda72bfb4bfed9e0c20796ad9613baaaaa6e8adfad8
-
Filesize
512B
MD5db7aea68e3130471d73dd8989b267b74
SHA1633cd7975494263a9d4b29227d022086d6d95b19
SHA256503a5b7dde0a68442490d4c50ff3d39e794f943d786671294d65a36d3caba735
SHA512bdede4802d48fa7a562ca442a93cd9c86e00184ee127812f31c1a28981d57e3ff67fe4e7cf7556a668aa9f10750fd92c273c840ea6a683709bd9c502514ebdd8
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
414KB
MD5b483d4d20de3f08253734075540c0aae
SHA17765ff0ffcd3c0934c7d3b6e41d4214daceb2f71
SHA256ad8a91e55a565eaaa415ec0e38d3293cbb6c7a2eb13cd6bc9a4631afb5ee741d
SHA512026f675a810cca1414bfe38b13f8c18c5318f830e778aa8d8ac6a5ccebb043ae68efc5aa01ad2af258e67e9ac73b9f186c98c659a31ef1aeee855f6826bf31b5
-
Filesize
1KB
MD5cd52145e84fe4284b9db3654917ac5e2
SHA1725938a469c50fedfe30dd572bb20f9a2dcb37ec
SHA2567dcf0ffbd9b74186b8763d56f2baeeb8e1fd20883dc2c5ee05f8792da585ed07
SHA512eff0fb0c337e40351dc7129bad737416e07c4ad640099912941fbd5f9fa13d8c33f9f39b38c0da8279b73239db8fd3a90eb3e12c317a0086fa1f84a3bdd66d35
-
Filesize
2KB
MD5128503719bfdef6b09d4c8feb1a096d4
SHA18ca4eba243150f61a8660ed41c42510e16f36cb1
SHA256db1874b1c410bf8b36c2715ddd5b274e67146a1b75c6393be20abb9dafd6c20b
SHA512038e1cc07930281bbc2e6395baf41f9d463530496933a0f26bc1a37de4f3a1d75536ee1425a6f1580f8f32cda1e2e2fa4db754288d09351d81af5aafaa4aed61
-
Filesize
719B
MD564837ec60a5def703db0471648bdabff
SHA1f1eb4a00833351d6dd8040d9658faca109c0859f
SHA25604e4c66980a46478b18296ce2620239907d7406143d003fd7ba7bb6382440ae3
SHA512e856f892b0a8b4c645fb87d841e4faba64e2398589dbf25ee36f20e7df7a63e2e9464276232a625be4063659c924a005d8598fe03aa967c9d2a8d97b4ab68f34
-
Filesize
785B
MD5e9a968e4938a9bb9632799e2f10bbbbb
SHA18c9e1e04c6784d0f9d182081e6329897c957d166
SHA2568afd711f027fad53c5c96bc0d79574983b6d661af90aebaddf0f1dd858d03f2d
SHA512cf76a0a9051cade548200101d5e0837b1d1eacc441fed901641e7e9fa87ffa3304a98ba674c8d20ea30ff682076f45b60cdbf260e3dd2770b8f19ff2d393f133
-
Filesize
7KB
MD5706eac5bae6e4959da11a08a1193afbf
SHA118c1c4948c8b96bc2f56919cbcdd7c72c46d2e38
SHA256d5429c6c8ca4c09fbb0ecb5a4f32eba96f32ce6933c3bfd9e106d1d38fe45b0a
SHA512ae3f859feaec1cebf001f7294282622b62e71bff3f6ee7f9c6fb0b6e883f9b274f79c3295bb5db8699b17827b49e9cf7b44ea13fc7532a69d1f01b9ffb07c45c
-
Filesize
1KB
MD54ef1aedd1ab73b9fd9242f516223c882
SHA1b74752e4d31a8292a96caebddebaa2b83d3ef4a2
SHA256d75746e7f7d8b0ff10ca4f9a67bd03c697997824e161cd863ced10714e87c5bb
SHA512772c5f07aaa817dd89c9c90a0199ec0bb7c90d1cc0d42ea69c6285964ed490b16ccc4b48733a00d43cbaab8e981dfedb93a222e209b5193cee898e7d801560c3
-
Filesize
41B
MD516d3e6eac0e79222a9b368edac765b34
SHA148d5e621fcdd84108f5750d6905180b622715b11
SHA2563a518b70256a689906d6740062462e3124aad6e55c5aa47339a87a56e4933ee7
SHA512d0aaacf86100135241426e2a0e9ba44414aa456cd708124e2f9c3a8037e008870cbcb506d316e4fe7cfe1d6dc3073393989a6f3c29f7cfabd6b0f65057afe747
-
Filesize
627B
MD561bdf24d8b0e5b3192037728e9b9f975
SHA1bce049e3f459ee1a0c7e18164d53dc8518008fa7
SHA25668edff6c41daace5603ec305185a8f0751daf4a3e6e01b58ce43b0910447522f
SHA5125fd94eab98b299e87d3dca1e17e2b37f781b2ee38987d11579a7dd86fef215126c29652da73582e9200354d958f666ad821e102c579a50decbdb104628fefc2e
-
Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
-
Filesize
41B
MD5be948aecc38887832616d20c3b40085c
SHA18efbcf98d000ac2a914842b26d3b9394b828a3cc
SHA25628d865d25ec483005cbfdcb954f2b5e441b5a3caeb073a99a1dfdba5cf0ca350
SHA512348dedccfd3b3775eb62333a56cd675329f40e2f918f2cf3f169ac0d05fdd47979532b1009aa690fd0f7e498118aa1c805e021c26ffd50ee0f4f258abdf7ec62
-
Filesize
68B
MD5429059fdba597db89e491d6bc8d92b45
SHA12500f7f118b7d4c29521eab5030ef652d21c3630
SHA256a9ecdd5568d8ab46101cec0af5a5e2d14a0d44859e442ff55e241383e293f557
SHA512f9ffc61326c7acf79ca5c6e3405126ed2035cd422841392c8f4e485313095e13ef0220c275a756481dfb8542e75ad14e66311d6d039dc2aa51d799cd63de97c1
-
Filesize
26B
MD5e997208d16338dbd295ee9695e0bc5a2
SHA18899443b1027ccae3e88f5756c4b3e66aabbda16
SHA25619c478eac7a49e13d22a0f305a474c214dd4358be63e6cf047ba2374fe96e5c6
SHA5123bf329fa29a6b67652fa4ad7d04542046c0c2a7a5f9f0088573c2feee1a87cb0110b0c10619a817eb442ec9db4de5e521d685c6d7fcfab90d2af775453c988ae
-
Filesize
1KB
MD5527385c9a7dadd870919fb95ce4ff227
SHA1a83ddb0ba89e4f83a07d6e0524d6ea900e800c2c
SHA2563df2ccce7702c69051afd3fe66cf99e3f07e86d354956eba3888ddbaf545e717
SHA5123b2f1781552f701331e91eb46fd38a982b2a9de8eb7259e912a710c63399fbe86fcdbe4c41fd8b8f34b99773a94cb02024e9ec64c38aeea68ef378de4f842355
-
Filesize
1KB
MD574860bc33c04b72a4848a5d7b97bec5f
SHA1336856eed4d49ebd0d429877822ac5781b4a18eb
SHA256fb479f88bc809d106fc15c465079b19f6027a01ecbd0d79267147c0529adea69
SHA5129b6993ba917c3a687b0df03deaf9e5e6ac41d3606ef148e259eb32de8c41203249063059a11bd598b860f2e3d795c73cd339c5325f80a2623745e7003f6586aa
-
Filesize
1KB
MD5c954c504c75c8ba2b112deb64869f78d
SHA15b594778f7a5bdac4e41de2d6c81225d5e329e0f
SHA25637ee870f153d26b3956abcead4c45160b264fde6ca016bc2d330e9e36060ee46
SHA512af1705681c3a2ef83427c853d310bc2dd6159f5db1c1b5a5740431a5a928b4c6541dcd5e3fcffd6c06697b87ca740a0ce2473e2cf141f21ee13730f325d4403b
-
Filesize
2KB
MD54d332a5c731fb506bb4644c91c38f5fc
SHA156fdadb5d38b29161910b3c89ce57b1aae67733a
SHA25643e7ff284e786cced9a54218970d357ff06374836bc1791eb63d9bf26c6a3784
SHA512c791b70329e32559d99f0259b38a832bc849768cab37973567a04fe8f66e9f5477136014ac17d16d1a0df0ca0f4fdad86d6a5f29581c85068b7979fb9e73b7c6
-
Filesize
882B
MD5136e73ffc6805e043bf61a12b3755b1a
SHA1b7bd8ee6bd46f7bf3a2f21879e71ff4684e56361
SHA256ecf9d2a4448842086066d82fecd6ec372497298bfef3c8e3fd17a97187a3e7bc
SHA51262a12a8070955026e27e6c146d46bc44a345b0b4752e1c45487f06224e11c42490344b259ee6fe51fb6e9847cf4146abd7d4fbd0274d0f2c532868bc4be5d527
-
Filesize
740B
MD54ef85932c17e863921c9bbdf1394fe92
SHA1f3811986d3648be1ca89162a079aff4644fe26d7
SHA2560d6e7d7a915944adfb498a45a6db96efc77d0112ba1f374461868e257315dfa3
SHA5121ba7939efbd515f81333a155064e248de27b2c70cc71004136ab9d3c61ad34baab7f1d00529e1c78d4cdf11deddbad2376d27d5ab1af699a9d29c5b5da7f4db1
-
Filesize
1KB
MD5795fe2fffc9505398b787eb2f15f440e
SHA1c124812df2fbd8e4a65fb104aaab352ba300a57a
SHA256976cb8c0c715b0b0e8b4769b51af1a08f06a4823d69b1f5284fec4531da21fb7
SHA512c698c060692567afea47446d58d32e92b0bc922088c99e175f5125b264c20d425fe7dddc4b0d70fe9f53d41cfb87ef52965cd40934f21c9f5e2b9281dee72389
-
Filesize
1KB
MD5ae1702688d33694b08e2f990527fd179
SHA1fccea348af9e98608b152c1e35307d04a1cddeb1
SHA25687916bc88b54b8602b2f43695d34b196b5cc8948ccb6576b24cced2feacb245f
SHA512aa0aa7306867900ec765e0645e2666ae1a913fb1bc67ba205b3b80d1b37089bd8692c2b34fca233ed3bcfe89a42f095a375df787d5c29ced86bd040981110d2c
-
Filesize
881B
MD5ba75be02cd7e410fa660a1783b0fff3c
SHA1b5b60389112f5c6179878423c6c97eb5ab1680b4
SHA25677a060cb9e3f9a5eb52654135d00106d36208f3d38878ca3b752ca1af85cf42d
SHA5129985e466e1652eed843a9dd97832b8ee9bad05cd591a4b17548e876ac65c6cfa4da4f46e83dddf89f9fb1924d92dbf21ce13e66059d5cc7dbe0500cf0c0e7b0c
-
Filesize
2KB
MD55f93b7b61e5bcf973fd93c049061023e
SHA17c154666967abc13d9d38c9b79eb6933db64566f
SHA2564e537f889054c9f1dfb4b1a30c34ea180310dbc9b9bcc9123605f0f802a24557
SHA512d96bb4c9daab3b2a72a3d82682a8f66ee85a0eb525a87afd13f46de949ee8a02d9a560da6584ecd658681c93a13df03d9a0f57382fdc40f56b2541a51e858a67
-
Filesize
93KB
MD5ba57f9fe62bbcf10348091b7d08ce123
SHA10fba82354a775094f68fb49bd8530f97f6db97cf
SHA2561df6c43a03bf45cb91c83eb81d123877eb4f663b0693daf4ba590df900a01160
SHA512d030cb078a399eb104e5780426e14efeaeeaff93c4710186d1622b64a5ec547e20e318f72ac3c6adc3baa4680a955a3e43fa5964dd87a0684b21902672854e69
-
Filesize
153B
MD565026ee778e1372d9f4aed742772e893
SHA15a5f1c821d7639424f3c75a44468ab5f7dd4e8cc
SHA25615070f52136d5a8332f8d70f790bd7bb04cd6a99b386d40e0abedc40c42caa3c
SHA512589c4a12c6b6ec1a1cca957da758aaa900e68a23b4bc2f42524b0e8dd34f6c5378541d9293eae1ae8d478bf5b5229ce4218c058fc3b399eb5756afeb05c68616
-
Filesize
663B
MD52e42562e9d02dafe67ac6404f58289b7
SHA1c37072894b2169be2643dd5e541ff8dfccecebe2
SHA2562f70939006596d2496c26284508e70ef260968eae1385c220e91e74b58e0d13a
SHA512a65a9fff0c6e17c322d0f0d6e0233fcca6d701a331a0fbc7da7eb21474c11875bd0e3edafc6c1df248ba85f22fc47b403d5668316405adcd8f6e4907a893d3bf
-
Filesize
4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
Filesize
2.1MB
MD5d33dfbe7c40d3bbfaf6467764a51f36c
SHA1b6a49c8be3430568a6af01c905e81e37ad2eba14
SHA2567da062b502a2c33ffe3f0013fed7298a7b156a05e8487642d161cde7e2938c72
SHA5126a74a725b5abe24deb55b75793ce31df21528dd70267f0b5242ba3668c8ed41489d68003596cefc985abe016446dbc51bde34e31c5fafcaae152d6906832b8b7
-
Filesize
1KB
MD5634ab5e3e49b830079f88825c88d7f80
SHA1cabe4068d07d52c60f5b9f840fd887051748a3aa
SHA2562824000ad496be920c29d0a78589c72935288b40ce44b44c5fae672fbfe87fe4
SHA512ffc893fcad8d81f6ca272cf03737ab466eafd135599e6f6f20285d7f4c3454bedde4de5929dbb1be5010192747f5f11d86166509f24bfbf778f949762e47ef72
-
Filesize
29B
MD5302f7b6d9a4ffeccdda9ef94184c8326
SHA1d4038ca0629f57b7e5c4056e74a395e5598aa16a
SHA2565b36134b695f0a9a32f570b08cc3ef74e0687a0d2aa228853bc0346f77bffebe
SHA512299fda4936acf6479e22f9166d545976d5d99ba6fe7a5b7298cb336cf730eb7790524e4569fe64bc03c598c7e4117f163ddffc2e2889439f709c4d80ff665039
-
Filesize
43KB
MD54552bef39ba95cf341f28f10e0fc8c51
SHA13f7cc753999e5416236e9385704fe95c3abbbd08
SHA25696d734eedf948fe9728544da53d61d26171fda6a912b2c162202846a38cf638c
SHA512a0b70a05d34f49bc69b9bb30410776cf86ea428e8faef4c5a4003997f027ecaad9e8e550d343c4a174e26fea6c1f7dd7159c4aa301eca97a479938e3fc273ef6
