Analysis
-
max time kernel
200770s -
platform
android_x86 -
resource
android-x86-arm -
submitted
14-06-2021 19:17
Static task
static1
Behavioral task
behavioral1
Sample
0ad737848a03c5c39a08a79f8b871859f7824ee19917deb590deaefeaffd8bc8.apk
Resource
android-x86-arm
Behavioral task
behavioral2
Sample
0ad737848a03c5c39a08a79f8b871859f7824ee19917deb590deaefeaffd8bc8.apk
Resource
android-x64-arm64
Behavioral task
behavioral3
Sample
0ad737848a03c5c39a08a79f8b871859f7824ee19917deb590deaefeaffd8bc8.apk
Resource
android-x64
General
-
Target
0ad737848a03c5c39a08a79f8b871859f7824ee19917deb590deaefeaffd8bc8.apk
-
Size
1.1MB
-
MD5
c7f023e73ce2fc19f0f4d4a591c20567
-
SHA1
9c2d059a280f738fb0c9bfaf65ebced27fc5c7a5
-
SHA256
0ad737848a03c5c39a08a79f8b871859f7824ee19917deb590deaefeaffd8bc8
-
SHA512
2f2fedd995625c3f666b8e8ed64d83ecd7ff929aba178e5a08d8b7363d43b2a18b4c0b3e6ad540fdba795a724f47c01a27659003944f458a435247b96b1333c1
Malware Config
Signatures
-
Reads name of network operator 1 IoCs
Uses Android APIs to discover system information.
Processes:
iqqgvtb.bcyindziyckutotnchpw.fddgdwakdescription ioc process Framework API call android.telephony.TelephonyManager.getNetworkOperatorName iqqgvtb.bcyindziyckutotnchpw.fddgdwak -
Reads serial number of SIM 1 IoCs
Processes:
iqqgvtb.bcyindziyckutotnchpw.fddgdwakdescription ioc process Framework API call android.telephony.TelephonyManager.getSimSerialNumber iqqgvtb.bcyindziyckutotnchpw.fddgdwak -
Uses reflection 2 IoCs
Processes:
iqqgvtb.bcyindziyckutotnchpw.fddgdwakdescription pid process Invokes method android.content.pm.PackageManager.isInstantApp 4992 iqqgvtb.bcyindziyckutotnchpw.fddgdwak Invokes method android.net.Uri.parse 4992 iqqgvtb.bcyindziyckutotnchpw.fddgdwak
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/app_webview/GPUCache/indexMD5
93027d42b314432c4216e6cfca48b384
SHA143448dd8102979c3926828182579691945eedd4e
SHA2563cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c
SHA512a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e
-
/data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/app_webview/GPUCache/index-dir/temp-indexMD5
06cf07dfc8b02b19dcad6b543285037d
SHA1d6ecaf2f39ca4faec12c794b7eb0a44665d1bf87
SHA25602ec5c13114755f924506f1ca1037737ca5bb70837e8be4623ca11206c478a0c
SHA51211e967a0ff74edb9d22576ff82e33933d42871d16eb92fa078b7d7770cfaa9b0cfb39f6565c2aa4984f21002b283ae841b537a541c85815f68cb905c79572823
-
/data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/app_webview/Web DataMD5
5168d8c4556ac22decc2362ce61ddafb
SHA1664cb3c7b0b5b13c3b915c28354793bcc0afd408
SHA2565057cf5dab27589d93f7d55ffa505ea8249c213b79fd8c85ac39423c135c5db6
SHA51281cefa22b3b1d30acf590b44b97a47b68c265a15b3725ff348ac0256faae0aa76b6a9bedece897c912bbcc86623c3a20c193ff131d9a25d0ee8e315394ae332d
-
/data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/app_webview/Web Data-journalMD5
ade0f69367328ac97eee00b67f950670
SHA17b9828bc874fe481b2ba4ea5361d3b2f0a7d3603
SHA256a7acf96eb9022ae6113cd101d6346fc50f33a68c4ee839fdfe85d314fc22ec94
SHA512a9f55dd3649800e76b3c677b819589b74956f3ba49c2d998e8f0f835e570acbbd8d0e9d6451f344d71f57ebd6b150945a1d45e47bf15ee9437545161738aa6b5
-
/data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/app_webview/metrics_guidMD5
fc2535db952ce1dc8ccb1adfffbce9e3
SHA17998792547a2604a346c7ae98b346e77e5712e23
SHA2561fa82a8b2977421b25a58cf7fec875df1063fc0ab2803c52319e655d8d6e0d17
SHA512b48c30f4d932fe8cd2371e7e570bcf2e03d2968d4fa41346a8127f81c90f77b662a3e0c74859ee3132a4a4417f34d63a85988fbb0d503a966bcb2689d1becb2b
-
/data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/app_webview/metrics_guidMD5
fc2535db952ce1dc8ccb1adfffbce9e3
SHA17998792547a2604a346c7ae98b346e77e5712e23
SHA2561fa82a8b2977421b25a58cf7fec875df1063fc0ab2803c52319e655d8d6e0d17
SHA512b48c30f4d932fe8cd2371e7e570bcf2e03d2968d4fa41346a8127f81c90f77b662a3e0c74859ee3132a4a4417f34d63a85988fbb0d503a966bcb2689d1becb2b
-
/data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/app_webview/variations_seed_newMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/app_webview/variations_stampMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/app_webview/webview_data.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/shared_prefs/WebViewChromiumPrefs.xmlMD5
21223e9184445fe043476484cd8cb1f9
SHA12b4813f849121d60ba35eb0889080668bb62c778
SHA256bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af
SHA512be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48
-
/data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/shared_prefs/bugaga.xmlMD5
4b545160b0c5c0aac8715c643add941b
SHA1612b3ad126450a29d48e952d45348d337000ed4d
SHA256f515a7b32973a1c1dfb0ec7851eabd9515e262a9d10aabb55016c1ea21891fe2
SHA512b8f00ec929d41a6aa73cea852db0b8a0c72bdd31530c3de9ad531250e312b16e8f929d45a37662d1ef12501ded6d3f6daa285a7fa895323886afe9b177ad7b8b
-
/data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/shared_prefs/bugaga.xmlMD5
8e3d990f948eaee70b80364c537df7b5
SHA14e17bb22258e8f7176dd25f472c86d05cfb1658c
SHA256857ea3ffb7abebc8cab17bde2c5c04dc4912e57aab379594e10946b5301998f5
SHA5128353f44fe4480a64b3bd84a0a8a329de4059679ef2a88b04bf52a2ff0f822582f663feedc343ea9bcb55820b7169f2d93139cef4c752ee3878a5d19f28d3e654
-
/data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/shared_prefs/bugaga.xmlMD5
46f9c31bf6d441c22cb89ead2303bf5f
SHA1bbaa88e1579def4f01c5ecb5cb2ae76611569528
SHA2567e96920e0a8d8e07b8c03466f9b7a9a5b721f354f86bcb5c2c449c4e7c708d9c
SHA512205e4f8198bacaba69af508d108821362271e44f019f8019a56f1756058a498ebc4f94467ec18d91f11221ed957d3eb601f0b0029126277dfe38870ba105029f