Analysis
-
max time kernel
1s -
max time network
144s -
platform
android-10_x64 -
resource
android-x64-20240910-en -
resource tags
arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system -
submitted
09/04/2025, 22:06
Behavioral task
behavioral1
Sample
d11d8e348c18619058f8aa759011b290da27a98ac3e1b730cc3ef1ee617ab88a.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
d11d8e348c18619058f8aa759011b290da27a98ac3e1b730cc3ef1ee617ab88a.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
d11d8e348c18619058f8aa759011b290da27a98ac3e1b730cc3ef1ee617ab88a.apk
Resource
android-x64-arm64-20240910-en
General
-
Target
d11d8e348c18619058f8aa759011b290da27a98ac3e1b730cc3ef1ee617ab88a.apk
-
Size
4.1MB
-
MD5
675f4bc84ed3d61cf057a3de8a00426a
-
SHA1
592dedaaf6216addaff3489492b6c02608b805c6
-
SHA256
d11d8e348c18619058f8aa759011b290da27a98ac3e1b730cc3ef1ee617ab88a
-
SHA512
dd6a8f5b06bf70ac992981b8eb7002d41ffdf1a94744fd45a859d4e035e1c27caad17c9e45e0f7ce882b9b28a1d5a52638e258ff211fcdfda1556407eb871275
-
SSDEEP
98304:O2+v/7fp9OtWgWpcsdSeeyxcNXdCggrnHDnlZzSSyGO2pNDRYdq+5jKgkbrQJF:O2+v/vKqpcCe/RQlRSSzOqK952db8JF
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
ioc Process /system/bin/su ru.tyvjweza.siiteulnl /system/xbin/su ru.tyvjweza.siiteulnl -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 10 IoCs
flow ioc 36 sites.google.com 41 sites.google.com 42 sites.google.com 44 sites.google.com 34 sites.google.com 35 sites.google.com 37 sites.google.com 40 sites.google.com 43 sites.google.com 45 sites.google.com -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver ru.tyvjweza.siiteulnl
Processes
Network
MITRE ATT&CK Enterprise v16
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
20KB
MD5331bf044c69f8b9fb4160091f519f777
SHA1830a4c2eb31abaec3faefc2179bd0e41ce3d3911
SHA256f0bc70dbc62ebcfc8de5532c8860dac520110546991f2051642066d06246c78b
SHA5122683020b7e96acf5692d0cc885f4c14c8d02da02ef09e57c49133c51493cf4ff2146c965b12f19d94bd390679c311b0c556d90f309db77a46f2c1ef4492fb631
-
Filesize
512B
MD525f2ca53baa1566f8545096d2bdcfbe3
SHA1ffc1cf37ea0ae060aff0fb77aa6f28306935394e
SHA256020c74f171f236a83c9ec80e8daef40a4710c8a699204ff30d0cc26eaea3776d
SHA512dfa89f213d1ca9671cde771200a20d48814106b139ad5faed52f701fb303543644b15e63ccd7868b87d94d5af7a06b3b20a93736a0cbe87beed822b606de8914
-
Filesize
8KB
MD57a6fe49108923f8814f008ba4eb16e36
SHA1974726418a11e17a4c01fa8c4902abc7b76efa77
SHA256cc1b95ab3aef10ddf2292555f4fcd85dcb47177db2bc6f5da84bce04d84f3905
SHA5129492677965728f0bc5f031941cb91782dd167958bfd5362b43494236f1c76aca86c22bccf25b219b15f42e6bcee2d931165f6aa964b4bb83fd5c75a1acde0870
-
Filesize
8KB
MD5874256f65d98e6e3bd18f9011ea47d21
SHA1a95d9beff85fb3bafd3e61468814bf9640b2481b
SHA2562e5048853919a7d42d50956205beefe1ee18fc7211a798e0f735a94cec83bec5
SHA512e8cc2dc1cf3771c6d32850458e69da64ff43732c89cf3f59ef28a93ce55935108239d12093e2c3153a453ae8a92cf0b1980bf4efe6e1853d52cf9d6ce796176b