42dbab5c073b5a9f6989c7ef67349a361a1d40e9dea93833362dbc50900ddbc6

Analysis

max time kernel
31s
max time network
151s
platform
android-9_x86
resource
android-x86-arm-20240910-en
resource tags

arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
submitted
17/03/2025, 13:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

base.apk
Size

3.7MB
MD5

7531efaf77378e6969b2793ff5a81913
SHA1

9ffddafba7932be8925a120104fac84ceb71a071
SHA256

d40e45359546cb801887a38d4adb397327ce4bf0a166192f5f72165471fff10d
SHA512

acea2e24c2a19ccda810053e22fd46fb33490128f7d0a2560f353c70705608054f11afb1caf8aee2fd0d94746441081ad3503b636df4fe7925b11cfd1a364429
SSDEEP

98304:M1y8VDJ8nOjywaeY+La5UYHhQewQ7fLDcjzY:4y8Vl8OjIgOqYHmyzDcnY

Score

7^/10

defense_evasion discovery

Malware Config

Signatures

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

defense_evasion

System Checks

T1633.001

ioc	Process
/dev/socket/qemud	com.example.mysoul
/dev/qemu_pipe	com.example.mysoul

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.example.mysoul

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.example.mysoul
1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
PID:4310

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.example.mysoul/no_backup/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
a766aedfc62181c7d916c1ba23f140ae

SHA1
3d98c6046845b9cea3864ff66e26b849c4141ded

SHA256
303c97ca43ca3f9038d53f75830097ee074ca6376036cf85ea4bbc966b1bd3d9

SHA512
7c728d683f31ef0607b8a75b80fc49206e9bca88ccfc88dc4a185a948e2438dcf0c2f06b5c9780ba6d281f527dbc888965b22cffb37ff52840e708a3081c3bba

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
3ea4c7f5e094f23b80ebad948c53a5f8

SHA1
59f66c4d7156c4dee2443bf634e559b43e8aa204

SHA256
8b07fa1b9594e0bd081d2c1dfafd858c8e78cee9971970201784a5eee2c15b24

SHA512
70daee2bd5d93205b1bc1726182d61fe2eca97934dc45aec7846ef01576168dd30846083f5cd281622092161c46b0b953725cd71c42b4b3473b373701a90bcaf

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
b69f49e1daae2413af086d919acb0390

SHA1
f7da0bf3263e5a2a00ae6eb0e2e160748a7d6bb3

SHA256
b954f94071c3b9fd851ad94d83793747008c79e1a80c52de79db51dcd844f0a3

SHA512
0d53f4f6f56b194661c6317bfe1685b88dd4de6219d82a1e1eb5b87c362c0d5e81e3ed5eda3a538454c3d929d0338ca5445fbe682f500f3e24173629d9c898b9

Download Submit