Resubmissions

11-06-2021 16:49

210611-9azca2rk72 8

11-06-2021 13:02

210611-xstgpe6j72 8

13-05-2021 11:41

210513-ca8exx1m7e 10

13-05-2021 11:33

210513-bf5j79np5n 7

Analysis

  • max time kernel
    1703164s
  • max time network
    155s
  • platform
    android_x64
  • resource
    android-x64
  • submitted
    13-05-2021 11:33

General

  • Target

    bd005c1854ffb4f56ec4524825f49a61.apk

  • Size

    6.6MB

  • MD5

    bd005c1854ffb4f56ec4524825f49a61

  • SHA1

    cd02b2185af2e8785e2c506ee21e7b8a73a39f02

  • SHA256

    2e6fc58f22d79504a3b29a58283a846371606da5f220a69abdb92a5e3a9667f6

  • SHA512

    8fff9d70f15d94c4575e67dd0d7484f1a7c4d8cfdc997d23b3958510a33c8732ea09f6921c86101d8189c7ccabe203a74022946ba887d80e926474780eab0f0e

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.tencent.mobileqq
    1⤵
    • Loads dropped Dex/Jar
    PID:3627

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.tencent.mobileqq/app_DynamicOptDex/oat/tWo.json.cur.prof
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.tencent.mobileqq/app_DynamicOptDex/tWo.json
    MD5

    93e914c8c7c969d79c9d72d9912b3e78

    SHA1

    d54d18ee51bd4d1d604eb90d16f7c75cc055b6ea

    SHA256

    3017ba72ea5822c815750effeaad2fdbe9250e3ddd65f52793486227f0489162

    SHA512

    b4db1401d76a4f2dcacd16311160db5ac0a151055e68e5f8cd07c78d241c6bd5565b92204c6ea3c02b65b83972e76c8a97f888c37c005db180a6fee96fd15a3b

  • /data/user/0/com.tencent.mobileqq/app_DynamicOptDex/tWo.json
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.tencent.mobileqq/app_DynamicOptDex/tWo.json
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.tencent.mobileqq/shared_prefs/FedEx.xml
    MD5

    78bf9f4c4c700bae4ad866edcf5b1310

    SHA1

    632a37c3d7e46e9a77ee5f4ffb7516ecf4c55dd1

    SHA256

    549f134584af321345675c6df294cb16847d5db7570e19ad8dfbed866ce3ea9d

    SHA512

    d4d19b28bbd5e43af42e79f1522d80cddcd8fb83bb93f07d49e93bf4ce9cff2a6e4fbb8bcb64b90a27651897ed0c05915e20cf274e183b8d891666e8b7c18b1d