Analysis
-
max time kernel
4048437s -
max time network
44s -
platform
android_x64 -
resource
android-x64 -
submitted
29-07-2021 08:07
Static task
static1
Behavioral task
behavioral1
Sample
org.shadowice.flocke.andotp_base.apk
Resource
android-x64
General
-
Target
org.shadowice.flocke.andotp_base.apk
-
Size
7.0MB
-
MD5
b608d16b9ac86961c1be8680bdacce04
-
SHA1
0b406aa5ff65375af1d4e74ed594f1ecbe46fcc0
-
SHA256
4558eae858ac3205cf856240479450b69436dff3dac84fbb01a5022b6070a1a7
-
SHA512
593d0ba1233e9a4fa68db860441e8cbd8fcce1c0b88885f43c375b834254015d0e09f3e73ab88a102f12e08f5fb5e08cc476ec22eb099c349516054b83ddc594
Malware Config
Signatures
-
Uses reflection 1 IoCs
Processes:
org.shadowice.flocke.andotpdescription pid process Acesses field sun.misc.Unsafe.theUnsafe 3577 org.shadowice.flocke.andotp
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/org.shadowice.flocke.andotp/shared_prefs/_has_set_default_values.xmlMD5
f2b4296ffe441b87312ddc80a3ac98ff
SHA10603dc05dd32b5dec50acfcc1951a85c18b8b4dc
SHA25670b6eecd62c222a39f6a2f3d8164714dcfcc2e7afcfbf0a7e773887266230ce2
SHA5122dce930f6c49eef639567068731437f6df2043da467b41a51f1c5aab66d346c1b0e8197905700d30c8c259fe5e445a0ca66d7da5ee1fa983d7b33a5c9971f4e3
-
/data/user/0/org.shadowice.flocke.andotp/shared_prefs/org.shadowice.flocke.andotp_preferences.xmlMD5
4eee4f9968a15c68794b26edfe1fadc5
SHA1875f777c3a42d9946f6f08fa944a9fda771df1d5
SHA2560e4aef11351e60a0cf7f19677997193a6afa52b86a56f1553183b2151a1f7356
SHA51276d3667dcb0ac62c3bd65f856b37afb4b092536064f3b279ac2d01cdaac0f89e0ae9cd248f8bf60a621d415b7a4f9237a87bbe73156273ac60741ab11df53c5f