60db6ff5ff05319afe17e7225e02019f1ee8e6bae6b8e1eaf0bb455b52a40a2a

Resubmissions

30-07-2021 07:33

210730-kvn3bh61ex 8

30-07-2021 07:25

210730-as9qtj1axe 8

Analysis

max time kernel
4132447s
max time network
45s
platform
android_x64
resource
android-x64
submitted
30-07-2021 07:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Download(1).apk
Size

2.0MB
MD5

5158ab3c7ef40d3b9d00d80390158434
SHA1

3b1e9c99fecffb9728410646ed7396647d72669d
SHA256

60db6ff5ff05319afe17e7225e02019f1ee8e6bae6b8e1eaf0bb455b52a40a2a
SHA512

2edb70efdd32420de1653d28e59facab1dec6832bc0c362e2688fd40926e8ef09433e100e942423e0d6fb21933ab7c406f9ba620238d9e5f25c545f1b1152a3b

Score

7^/10

obfuscation

Malware Config

Signatures

Loads dropped Dex/Jar 3 IoCs

Runs executable file dropped to the device during analysis.

Processes:

com.fately.personal.voice.judge

ioc	pid	process
/data/user/0/com.fately.personal.voice.judge/files/21520808.dex	3700	com.fately.personal.voice.judge
/product/app/webview/webview.apk	3700	com.fately.personal.voice.judge
/product/app/webview/webview.apk	3700	com.fately.personal.voice.judge

Uses reflection 4 IoCs

obfuscation

Processes:

com.fately.personal.voice.judge

description	pid	process
Invokes method dalvik.system.CloseGuard.get	3700	com.fately.personal.voice.judge
Invokes method dalvik.system.CloseGuard.open	3700	com.fately.personal.voice.judge
Invokes method android.security.NetworkSecurityPolicy.getInstance	3700	com.fately.personal.voice.judge
Invokes method android.security.NetworkSecurityPolicy.isCleartextTrafficPermitted	3700	com.fately.personal.voice.judge

com.fately.personal.voice.judge
1⤵
- Loads dropped Dex/Jar
- Uses reflection
PID:3700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.fately.personal.voice.judge/app_webview/.org.chromium.Chromium.Itb6G9
MD5
4f6abcf114b510ddbbfda9b4d7ef22f8

SHA1
9c706163f416211b5e9b77a77dfe9393e2210f7b

SHA256
6584671277d9b91788e80e522a8ebb5ea7a27ca17145c7d9837780a29e18e208

SHA512
1bca3ca47623b411a1536eb882dc505264c0f3d485d410d6e27902729c97710494565e5a9b51ab18a6016abe0cfd8d53d20f4ddd891ca8d0c5d8a5cbfee6a9a3

Download Submit
/data/user/0/com.fately.personal.voice.judge/app_webview/Web Data
MD5
dfea4f9a562d22c658ec695eca31ea04

SHA1
2e48be6baf86078d93f14fc38fe9f395c1c54261

SHA256
a01b4f35e09bbcdf9753512d4d3ac0b82c8e2f09e2176fa4a5c2523909795b2b

SHA512
8e0aab3c5f29a8737b4713b4a1622aa71b3574feabfb41a098f1326b80472c3fea053e759036c44df71aee1a8a1e9caf93f17a9eec88ab278062d7ed48907789

Download Submit
/data/user/0/com.fately.personal.voice.judge/app_webview/Web Data-journal
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.fately.personal.voice.judge/app_webview/metrics_guid
MD5
e6d374d9304c0ec2578dfe6df4246004

SHA1
e3c6a9a5fb7bd2b2f7d1e9649b6c06cbadb8bccd

SHA256
ccf578239dc86b1dea19e743c596ccb6626c1e01839b3cba97a19c9751d6c962

SHA512
91202060118d4e81adf59f9436fd0024e02565cc1ef2956e86c6bf87e6007e8eb896a63acaa93abfdbdc16f3adfe5e72ab1ad488e3bc1d6c8ea9e211079a4960

Download Submit
/data/user/0/com.fately.personal.voice.judge/app_webview/metrics_guid
MD5
e6d374d9304c0ec2578dfe6df4246004

SHA1
e3c6a9a5fb7bd2b2f7d1e9649b6c06cbadb8bccd

SHA256
ccf578239dc86b1dea19e743c596ccb6626c1e01839b3cba97a19c9751d6c962

SHA512
91202060118d4e81adf59f9436fd0024e02565cc1ef2956e86c6bf87e6007e8eb896a63acaa93abfdbdc16f3adfe5e72ab1ad488e3bc1d6c8ea9e211079a4960

Download Submit
/data/user/0/com.fately.personal.voice.judge/app_webview/variations_seed_new
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.fately.personal.voice.judge/app_webview/variations_stamp
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.fately.personal.voice.judge/app_webview/webview_data.lock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.fately.personal.voice.judge/cache/WebView/Crashpad/settings.dat
MD5
9ed71ea4781cb1e3b36616f65f336990

SHA1
d9a2b517b6689699f431227dd1676d162508406f

SHA256
2c47308edf15557d51045eb10b30055c63b8a610285b546e48caa085570428d7

SHA512
6c040ebd888ecb23ffcbf3c972af31cc8adad20dc060b055d9db6a37470e0bec999c18336b0b8785cc4344d92a1a8b925b11b308d6effaa14a7da843964c24ba

Download Submit
/data/user/0/com.fately.personal.voice.judge/cache/org.chromium.android_webview/Code Cache/js/index
MD5
54cb446f628b2ea4a5bce5769910512e

SHA1
c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

SHA256
fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

SHA512
8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

Download Submit
/data/user/0/com.fately.personal.voice.judge/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

Download Submit
/data/user/0/com.fately.personal.voice.judge/files/21520808.dex
MD5
a8c776877f12d0848cb53547a2f140f1

SHA1
a87ea051f6adee33e1a01b712be73430687727cb

SHA256
0bd90b3e67078f493ad91646158575da1ec24c50e968a911917606f3ec2f24b4

SHA512
8be9b89bb7e056c821830eb0a65ee30b4ff9e3fe78b7891cb39cdb4e4306c89242e869311a97f58146ef7079d192b9e766692c99c68eed274be20aa73e4fd1da

Download Submit
/data/user/0/com.fately.personal.voice.judge/files/21520808.dex
MD5
52c2cef03b4c8c418d40350f5567cc46

SHA1
51564f77431556928ff750440e3f317f2c7487b3

SHA256
d90e7e6db17c5f4c28b4045f457a15796cad6c6988c1d257eeed374d6a97e07e

SHA512
69fedf934e7a8c754676c06c0a817c6e0c6d5fb24bb08428a8cce6f4e16da1419d7e6abbf6655be9334454028dcfd3fd78098659c1b76c4a71af09cc2097cc2b

Download Submit
/data/user/0/com.fately.personal.voice.judge/files/BGEaUZrY
MD5
11d3244e76d73689770a6d607462573c

SHA1
05475d84ce3df2c3d79ca5dcbaec2b62a96e8004

SHA256
b47f4f69feda95d1bfb116ff53920850065f69e461763c344fa17493bacc5b0a

SHA512
6a7ae9919bda4df93fe4fb52d7f9e2ad2d4c8ae38cef98bfeb3781cf640e9b6004efb2993f782b2e122e5ad68cde564a0f89932058e920a1c91ea27e71a457e7

Download Submit
/data/user/0/com.fately.personal.voice.judge/files/TrPJFdsN
MD5
9ece1af17d88f107be8888f7291ae0fc

SHA1
8d53d691ca1941474da851df116b639def85bb51

SHA256
d652238973bef359125a87be1d0e741b99bcd81bc525e8c7271d13cdc1eead24

SHA512
df26046bd09b58cfd584b1e89c0b37f4d4ff273e9858d4595aebd0071fe8fad285f4c64d8ac1b653bba32f59586e28ef9ba3b43e42d0ad170beea0002f7d79c2

Download Submit
/data/user/0/com.fately.personal.voice.judge/no_backup/com.google.InstanceId.properties
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.fately.personal.voice.judge/no_backup/com.google.android.gms.appid-no-backup
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.fately.personal.voice.judge/shared_prefs/WebViewChromiumPrefs.xml
MD5
1357a1d7af06755d561a7ed916373baf

SHA1
4a0a0d8b4b81bba92924dd7cf53a44d438312729

SHA256
647f3960ac648b24a8d9fa17f93f625437bd6f385636c56f10fefdd9cd447597

SHA512
61f15a595e21cb7cbf0b1a5268da72b39ce767e43195b4b1a607125e6e1d3237aa382cffbeb122bee9111f01a61ed4aebc2bef6fa646891f43154b01c32d05d4

Download Submit
/data/user/0/com.fately.personal.voice.judge/shared_prefs/com.fately.personal.voice.judge_preferences.xml
MD5
ab56b153a5d5cab6982949eeea9b2d3e

SHA1
d8bd9880eda5076c0b3f9eb70adb2f3e5c1928b4

SHA256
0c00faa06196415fffce544b390387ab80ba17e1f2b877ae22f8bbaedc4f4fad

SHA512
e1134ea8590ee51333750e445970650f17475594874f84cfbb016e3caef9313c14c2836d9e0f16083c7345e86f5fed4dea7f343db86841e4d927f88bb3ef1861

Download Submit
/data/user/0/com.fately.personal.voice.judge/shared_prefs/com.fately.personal.voice.judge_preferences.xml
MD5
701d038315ee9e39ed9382b29d318d11

SHA1
d83bb178d4241ac7eb94772eca87bde8a7e995c9

SHA256
2ec3d8b109343b039a1862aa11f246060037bbb115ace1a229a8433f4e2435e6

SHA512
79d6b51326058e137c4c6b7e254a087759921c8bc89829fb88235635ea35b6c56551b78b33529dbf12f2b78d19c0fd1aace21af25cec267886166678f1dab272

Download Submit
/data/user/0/com.fately.personal.voice.judge/shared_prefs/com.google.android.gms.appid.xml
MD5
6cd8192b8bb8250a6c69092d41f5a8b7

SHA1
4222f03780a1018c8e8427a9dff86c36fb22745d

SHA256
fa2354fd0d99fe7a9d01e2c96d95642c3476de56aa59d00861e84ad34f51f654

SHA512
d16cadb03b7f2b6acb8917a6132226d8939c82c48bda399de8a1063f79b3bcd612d0d3c9e54efd7b27ab36c89939e2fbb6cc09ef46b6c4b96272e02dfd2b530a

Download Submit
/product/app/webview/webview.apk
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/product/app/webview/webview.apk
MD5
40e61bace188b6603d53fc3d8916a3f8

SHA1
74f7fd19aedc55977c79fa40230977ce4827cb03

SHA256
6ede39de8efb9d2f0a2c467f4c9e303b03236e9c6917fb4d6fa2ef3b5d15090e

SHA512
12f8424d5616774cf98c4955f9bd80e9967cc944d1ffee1a4cd6ec6f4e4fbf402030c58dde9480057c3d7e3c6805c6edccf77825a024dc87841783a5644b68af

Download Submit