Analysis
-
max time kernel
1595770s -
max time network
9s -
platform
android_x86_64 -
resource
android-x86_64 -
submitted
12-05-2021 05:47
Static task
static1
Behavioral task
behavioral1
Sample
40895_Video_Player.apk
Resource
android-x86_64
android_x86_64
0 signatures
0 seconds
General
-
Target
40895_Video_Player.apk
-
Size
4.8MB
-
MD5
63ccd6c2909ade6167815f7a1b542382
-
SHA1
24800575be8b387f4e321caf67a6e26f30b91a82
-
SHA256
b1a4be5c6a8eff345e9f6ad4bdc52b7f01ab0f5aefbb802e826058a0547f50e6
-
SHA512
ce2b74329acb900988e9159578139566a6c1815d237115ef36ca2ddaccf4ad3b3ad48b46e291642c6a86a65c35a3fc4ba84a03beb62d9659bf5d781c471d254d
Score
7/10
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/angry.risk.excess/app_DynamicOptDex/ICJN.json 3650 angry.risk.excess /data/user/0/angry.risk.excess/app_DynamicOptDex/ICJN.json 3650 angry.risk.excess -
Uses reflection 29 IoCs
description pid Process Invokes method java.lang.Object.getClass 3650 angry.risk.excess Invokes method android.content.res.AssetManager.addAssetPath 3650 angry.risk.excess Invokes method android.app.ContextImpl.getAssets 3650 angry.risk.excess Invokes method java.lang.Object.getClass 3650 angry.risk.excess Invokes method android.content.res.AssetManager.open 3650 angry.risk.excess Invokes method java.io.FilterInputStream.read 3650 angry.risk.excess Invokes method java.io.FilterInputStream.read 3650 angry.risk.excess Invokes method java.io.BufferedInputStream.read 3650 angry.risk.excess Invokes method java.lang.Object.getClass 3650 angry.risk.excess Invokes method java.io.BufferedInputStream.close 3650 angry.risk.excess Invokes method java.lang.Object.getClass 3650 angry.risk.excess Invokes method java.lang.String.getBytes 3650 angry.risk.excess Invokes method java.lang.Object.getClass 3650 angry.risk.excess Invokes method java.io.FileOutputStream.write 3650 angry.risk.excess Invokes method java.lang.Object.getClass 3650 angry.risk.excess Invokes method java.io.BufferedInputStream.close 3650 angry.risk.excess Invokes method java.lang.Object.getClass 3650 angry.risk.excess Invokes method java.io.FilterOutputStream.close 3650 angry.risk.excess Invokes method android.app.ActivityThread.currentActivityThread 3650 angry.risk.excess Acesses field android.app.ActivityThread.mPackages 3650 angry.risk.excess Invokes method java.lang.reflect.Field.get 3650 angry.risk.excess Invokes method java.lang.Object.getClass 3650 angry.risk.excess Invokes method java.lang.ref.Reference.get 3650 angry.risk.excess Invokes method java.lang.ref.Reference.get 3650 angry.risk.excess Acesses field android.app.LoadedApk.mClassLoader 3650 angry.risk.excess Invokes method java.lang.reflect.Field.get 3650 angry.risk.excess Acesses field android.app.LoadedApk.mClassLoader 3650 angry.risk.excess Acesses field com.android.okhttp.internal.tls.OkHostnameVerifier.INSTANCE 3650 angry.risk.excess Acesses field javax.security.auth.x500.X500Principal.thisX500Name 3650 angry.risk.excess