Resubmissions

22/10/2025, 15:02

251022-seysjsew4b10

22/10/2025, 11:58

251022-n5a2yssjal7

Analysis

  • max time kernel
    24s
  • max time network
    31s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20250917-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20250917-enlocale:en-usos:android-9-x86system
  • submitted
    22/10/2025, 15:02

General

  • Target
    33565f0c856702bf634b8d48b4fbd753fe690108d41a75612d3b345875c2a7b4.apk
  • Size 9.1MB
  • Sample251022-seysjsew4b
  • SHA256 33565f0c856702bf634b8d48b4fbd753fe690108d41a75612d3b345875c2a7b4
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.similar.brother
    1⤵
    • Loads dropped Dex/Jar
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:4204
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.similar.brother/app_random/XXX.json --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.similar.brother/app_random/oat/x86/XXX.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4230

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        XXX.json

        • Path /data/data/com.similar.brother/app_random/XXX.json
        • Size 1.8MB
        • SHA256 f3d0573aa6347c81ae01b7d63380bdb231c2b371c186c821b70b62fdc3ba3862
        • MD5 SHA1 SHA512 SSDEEP

        XXX.json

        • Path /data/data/com.similar.brother/app_random/XXX.json
        • Size 1.8MB
        • SHA256 0b02ca3a421cc40ce8175cfc4bf351e90b465e46c0c761d6b3ead5236016c0a5
        • MD5 SHA1 SHA512 SSDEEP

        XXX.json

        • Path /data/user/0/com.similar.brother/app_random/XXX.json
        • Size 4.4MB
        • SHA256 c810f65bd4eaeb32b44d7b9fd40c01d62b81dac67db71880ba65ffc51c524f97
        • MD5 SHA1 SHA512 SSDEEP

        XXX.json

        • Path /data/user/0/com.similar.brother/app_random/XXX.json
        • Size 4.4MB
        • SHA256 d2153c348a2145cf3dfad6ca42b517505c3169a3906393f77c69d064d8e69da0
        • MD5 SHA1 SHA512 SSDEEP