d77037b6f396444fb94c9712e86b50e43108c23b8b947d7c8d9a71dd49e4cd68

Analysis

max time kernel
1s
max time network
152s
platform
android-9_x86
resource
android-x86-arm-20240910-en
resource tags

arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
submitted
10/03/2025, 13:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

com.medoc.cashalot.ingenico_20.061.SIGNED.apk
Size

45.7MB
MD5

e3a1698be1ae81363c60fabff79f97a5
SHA1

64a40648e65073c307f523248ca648ccaa0334d8
SHA256

d77037b6f396444fb94c9712e86b50e43108c23b8b947d7c8d9a71dd49e4cd68
SHA512

05d08ae4a999d874bbdd450c6d5b014b103da8f1f6c58121da5b55155ba3facbf35db888f19b3e75ecd6732e97a7caf0986a339af93e2ae55afc9abdb9322455
SSDEEP

786432:N1v3lgT/4SJfYI9drIh77OUs9NOjhtgHNBcfHV+R7OU6v:v36TqIkXOU2NOltPmOUE

Score

4^/10

persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.medoc.cashalot.ingenico

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.medoc.cashalot.ingenico

com.medoc.cashalot.ingenico
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
PID:4334

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...