Resubmissions

14-06-2021 19:17

210614-dz7janzdx6 8

14-06-2021 18:48

210614-6tyympk936 8

Analysis

  • max time kernel
    200770s
  • platform
    android_x86
  • resource
    android-x86-arm
  • submitted
    14-06-2021 19:17

General

  • Target

    0ad737848a03c5c39a08a79f8b871859f7824ee19917deb590deaefeaffd8bc8.apk

  • Size

    1.1MB

  • MD5

    c7f023e73ce2fc19f0f4d4a591c20567

  • SHA1

    9c2d059a280f738fb0c9bfaf65ebced27fc5c7a5

  • SHA256

    0ad737848a03c5c39a08a79f8b871859f7824ee19917deb590deaefeaffd8bc8

  • SHA512

    2f2fedd995625c3f666b8e8ed64d83ecd7ff929aba178e5a08d8b7363d43b2a18b4c0b3e6ad540fdba795a724f47c01a27659003944f458a435247b96b1333c1

Score
6/10

Malware Config

Signatures

  • Reads name of network operator 1 IoCs

    Uses Android APIs to discover system information.

  • Reads serial number of SIM 1 IoCs
  • Uses reflection 2 IoCs

Processes

  • iqqgvtb.bcyindziyckutotnchpw.fddgdwak
    1⤵
    • Reads name of network operator
    • Reads serial number of SIM
    • Uses reflection
    PID:4992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/app_webview/GPUCache/index
    MD5

    93027d42b314432c4216e6cfca48b384

    SHA1

    43448dd8102979c3926828182579691945eedd4e

    SHA256

    3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

    SHA512

    a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

  • /data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/app_webview/GPUCache/index-dir/temp-index
    MD5

    06cf07dfc8b02b19dcad6b543285037d

    SHA1

    d6ecaf2f39ca4faec12c794b7eb0a44665d1bf87

    SHA256

    02ec5c13114755f924506f1ca1037737ca5bb70837e8be4623ca11206c478a0c

    SHA512

    11e967a0ff74edb9d22576ff82e33933d42871d16eb92fa078b7d7770cfaa9b0cfb39f6565c2aa4984f21002b283ae841b537a541c85815f68cb905c79572823

  • /data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/app_webview/Web Data
    MD5

    5168d8c4556ac22decc2362ce61ddafb

    SHA1

    664cb3c7b0b5b13c3b915c28354793bcc0afd408

    SHA256

    5057cf5dab27589d93f7d55ffa505ea8249c213b79fd8c85ac39423c135c5db6

    SHA512

    81cefa22b3b1d30acf590b44b97a47b68c265a15b3725ff348ac0256faae0aa76b6a9bedece897c912bbcc86623c3a20c193ff131d9a25d0ee8e315394ae332d

  • /data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/app_webview/Web Data-journal
    MD5

    ade0f69367328ac97eee00b67f950670

    SHA1

    7b9828bc874fe481b2ba4ea5361d3b2f0a7d3603

    SHA256

    a7acf96eb9022ae6113cd101d6346fc50f33a68c4ee839fdfe85d314fc22ec94

    SHA512

    a9f55dd3649800e76b3c677b819589b74956f3ba49c2d998e8f0f835e570acbbd8d0e9d6451f344d71f57ebd6b150945a1d45e47bf15ee9437545161738aa6b5

  • /data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/app_webview/metrics_guid
    MD5

    fc2535db952ce1dc8ccb1adfffbce9e3

    SHA1

    7998792547a2604a346c7ae98b346e77e5712e23

    SHA256

    1fa82a8b2977421b25a58cf7fec875df1063fc0ab2803c52319e655d8d6e0d17

    SHA512

    b48c30f4d932fe8cd2371e7e570bcf2e03d2968d4fa41346a8127f81c90f77b662a3e0c74859ee3132a4a4417f34d63a85988fbb0d503a966bcb2689d1becb2b

  • /data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/app_webview/metrics_guid
    MD5

    fc2535db952ce1dc8ccb1adfffbce9e3

    SHA1

    7998792547a2604a346c7ae98b346e77e5712e23

    SHA256

    1fa82a8b2977421b25a58cf7fec875df1063fc0ab2803c52319e655d8d6e0d17

    SHA512

    b48c30f4d932fe8cd2371e7e570bcf2e03d2968d4fa41346a8127f81c90f77b662a3e0c74859ee3132a4a4417f34d63a85988fbb0d503a966bcb2689d1becb2b

  • /data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/app_webview/variations_seed_new
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/app_webview/variations_stamp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/app_webview/webview_data.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/shared_prefs/WebViewChromiumPrefs.xml
    MD5

    21223e9184445fe043476484cd8cb1f9

    SHA1

    2b4813f849121d60ba35eb0889080668bb62c778

    SHA256

    bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

    SHA512

    be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

  • /data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/shared_prefs/bugaga.xml
    MD5

    4b545160b0c5c0aac8715c643add941b

    SHA1

    612b3ad126450a29d48e952d45348d337000ed4d

    SHA256

    f515a7b32973a1c1dfb0ec7851eabd9515e262a9d10aabb55016c1ea21891fe2

    SHA512

    b8f00ec929d41a6aa73cea852db0b8a0c72bdd31530c3de9ad531250e312b16e8f929d45a37662d1ef12501ded6d3f6daa285a7fa895323886afe9b177ad7b8b

  • /data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/shared_prefs/bugaga.xml
    MD5

    8e3d990f948eaee70b80364c537df7b5

    SHA1

    4e17bb22258e8f7176dd25f472c86d05cfb1658c

    SHA256

    857ea3ffb7abebc8cab17bde2c5c04dc4912e57aab379594e10946b5301998f5

    SHA512

    8353f44fe4480a64b3bd84a0a8a329de4059679ef2a88b04bf52a2ff0f822582f663feedc343ea9bcb55820b7169f2d93139cef4c752ee3878a5d19f28d3e654

  • /data/user/0/iqqgvtb.bcyindziyckutotnchpw.fddgdwak/shared_prefs/bugaga.xml
    MD5

    46f9c31bf6d441c22cb89ead2303bf5f

    SHA1

    bbaa88e1579def4f01c5ecb5cb2ae76611569528

    SHA256

    7e96920e0a8d8e07b8c03466f9b7a9a5b721f354f86bcb5c2c449c4e7c708d9c

    SHA512

    205e4f8198bacaba69af508d108821362271e44f019f8019a56f1756058a498ebc4f94467ec18d91f11221ed957d3eb601f0b0029126277dfe38870ba105029f