Resubmissions

28-07-2021 09:38

210728-penb79klvx 8

28-07-2021 09:09

210728-nvx2dlrqe2 10

Analysis

  • max time kernel
    3967618s
  • platform
    android_x86
  • resource
    android-x86-arm
  • submitted
    28-07-2021 09:38

General

  • Target

    FlashPlayerUpdate.apk

  • Size

    7.5MB

  • MD5

    4de47a1a6c0db896371ea6d7c3826e02

  • SHA1

    0bd2c907249f9abcf86bba8b853247335db51a2b

  • SHA256

    3eba7728425ff722be181f04703abc8e4f4972be4ee0a16dbd904ec12f0aeaec

  • SHA512

    947dafb8fd89bbe98e148ffe40c759dde245d345b7e0b9300c21c80e5ddbb76b14080d412a6a81800666988d75731a2250df5c33e8a58b235db2929a7bf1dd9a

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.vdzbwmgd.rmqvvos
    1⤵
    • Loads dropped Dex/Jar
    PID:4678
    • com.vdzbwmgd.rmqvvos
      2⤵
        PID:4732
      • /system/bin/dex2oat
        2⤵
        • Loads dropped Dex/Jar
        PID:4732
      • com.vdzbwmgd.rmqvvos
        2⤵
          PID:4909

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/com.vdzbwmgd.rmqvvos/app_torfiles/.tor/control_auth_cookie

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.vdzbwmgd.rmqvvos/app_torfiles/geoip

        MD5

        555ef28dd5ff6726a47853949fb30376

        SHA1

        0476a34328ff097072a5b349e2909cf9433db3c2

        SHA256

        be48aff0b029e92b20c8cc6ebbd8b316a7aa94240766f00517f2b147fb7008fd

        SHA512

        a42f8ae85723884cc60b1d9b5330a64784703928dbd14ec251f9e211a77906caabe256ea720d89c88764825e7260e23d55ae1258b4d30de6217c1bb0b4e688bc

      • /data/user/0/com.vdzbwmgd.rmqvvos/app_torfiles/geoip6

        MD5

        d8714aedc4a6bdc32f06adaca5f36972

        SHA1

        b61ad680039474829a349e09157ca247c62fcda0

        SHA256

        8586f204f8fff5471f398d186458087354766b16d0f107074d3f7191a010e6c8

        SHA512

        7d7088430c884d7b71874d29794b71601897c9e9edd7734837496b94b899c3c3e2def3e03bb43b2c9a1c9bab525123ab01d36c877d3cf7e8411643e39dd81394

      • /data/user/0/com.vdzbwmgd.rmqvvos/app_torfiles/tor

        MD5

        f62d692de43aabfaaee59974da3d0342

        SHA1

        0e9fb9ab0ae236972a6a7b0034fb166f0c73a3a3

        SHA256

        7aba8ecb410355b7edcbd8943e9db1d5e154bdc3473faa85b61e79ed39279764

        SHA512

        e9ae67a441c10b734a5bacb5624273ef6ca7baf77af8eb0a4cad6f571eac99d9e3e53a2cd0ffdf88199fd7f4ca11b5022c30a14c7a955754ef08a13636ab42f7

      • /data/user/0/com.vdzbwmgd.rmqvvos/app_torfiles/torrc

        MD5

        a5537c6e54c265bd4a318bdc057b604c

        SHA1

        00e834c03f908659e5beeb57a0828b22c2d09acc

        SHA256

        c0fbdadf36a2b1ef0b4287b66d3a94312915faf5f10b0861e494ea6c40b62c2e

        SHA512

        062a02b944e990ae4871b53e83fdf15322140f4c50df286488dc1c7ddad423708d4c4eeb97af7518c4bdb54547ee1188822cfacd4ca3ed7032961625a251cac9

      • /data/user/0/com.vdzbwmgd.rmqvvos/code_cache/secondary-dexes/MultiDex.lock

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.vdzbwmgd.rmqvvos/code_cache/secondary-dexes/base.apk.classes1.zip

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.vdzbwmgd.rmqvvos/code_cache/secondary-dexes/base.apk.classes1.zip

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.vdzbwmgd.rmqvvos/code_cache/secondary-dexes/base.apk.classes1.zip.x86.flock

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.vdzbwmgd.rmqvvos/code_cache/secondary-dexes/oat/x86/base.apk.classes1.odex

        MD5

        7e2ed71fdca715c00e90884110c886c7

        SHA1

        8b476f512ebd4f145ec5a4b310a2dd6890ee77cf

        SHA256

        98749d63d493d3969f07647ba141c331e5a4d523764c4b5bb019385414781356

        SHA512

        cf5430cd4d153528471056c266847c40d2d1b18b4fa9e1b383c6316742b553f08b188c37c9c2b9fcd2ef6d53d3a3595548a9cc0277e8411db0e5a0c37e588211

      • /data/user/0/com.vdzbwmgd.rmqvvos/code_cache/secondary-dexes/oat/x86/base.apk.classes1.vdex

        MD5

        1da9d2562348d3ce4542d4c007162583

        SHA1

        1c43bb1364b24c2bcd8a251927ceba56d986580a

        SHA256

        932ea63fcca2e3ec9a344b66759450c381383d0597bca6508d0ae302fef82f27

        SHA512

        9ed6f3f6b64e4b4d2a24242de931d6bd7a946bfb023298c374692807d199e832cec8d27c5ceb54a66ee30cff3b4d357bb42661661f5eb070c9d8a1f178b6af56

      • /data/user/0/com.vdzbwmgd.rmqvvos/code_cache/secondary-dexes/tmp-base.apk.classes3001865641676266790.zip

      • /data/user/0/com.vdzbwmgd.rmqvvos/shared_prefs/multidex.version.xml

        MD5

        d7f2586b906e551986f3d2b7fa32798e

        SHA1

        99ceba0918ffc4415519b8f684db5f9441d7502c

        SHA256

        28b782a68572c881421999a2231bc7209fb84658035cbbe495fc3ad2d646bb26

        SHA512

        ac3fbe140156ad2709245ada7d54193c9c9bf357707e02442e393e4a10047214be6cb94ca2f765db43e4de366c8af87c3c626087fa06d96413cdb06a222d25e3

      • /data/user/0/com.vdzbwmgd.rmqvvos/shared_prefs/pref_name_setting.xml

        MD5

        f4fd21bb71e2055dc1040dacf362e8b9

        SHA1

        9568511a7272b64c99bdefebc85b4cb0114d7daa

        SHA256

        447e68e6e44d9f0faa23933a87c2b72ecd18839eaa2faab007f850253bbb29c1

        SHA512

        cb2ddf4ccf292d80db997ea4f096c0dac959ec974eae0d3d184fd4071e7d0b537b87ebd87bcef5b8ba928910a404cf19899586e044235f6d5e102dc5202e2321

      • /data/user/0/com.vdzbwmgd.rmqvvos/shared_prefs/prefs30.xml

        MD5

        1c6b6a6a91f2ccf7ac553f9a439ad69e

        SHA1

        270b45bc1c3255f95fecf8bfa85f7dbfc8fb5748

        SHA256

        a7958ee3107cac53056bac67328f317cf9e3aaf4533e1072f0c4f0334ebbffa6

        SHA512

        8a61fcab1bc82977f72af693d4a749ad41df81a9a9c6eaafee0f4ffd36a34f069a259c6b20046a8bce58a6eab526df122cb82e8d093be73cf5ff9d41e489bf8e