Analysis
-
max time kernel
4166087s -
max time network
131s -
platform
android_x64 -
resource
android-x64 -
submitted
30-07-2021 16:46
Static task
static1
Behavioral task
behavioral1
Sample
kbbank.apk
Resource
android-x64
General
-
Target
kbbank.apk
-
Size
5.2MB
-
MD5
0b2c68e87d4ca2f0f24e56dc5d2f82bd
-
SHA1
f5a8282f48c1895435fed871f774627182797777
-
SHA256
2bb50b25ecf6263514bf1922967cb93e4768f96485ee3d9f9bb6417c950cc1c7
-
SHA512
133fc8b462b1886b838854fd540b3969844d40e662303c2022dd0bab51f3c451120dbf8813841857e63325fb82f70d3fe581e80cafbc614db8592631dac8bb7e
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.securegroup.assistantioc pid process /product/app/webview/webview.apk 3618 com.securegroup.assistant /product/app/webview/webview.apk 3618 com.securegroup.assistant -
Uses reflection 9 IoCs
Processes:
com.securegroup.assistantdescription pid process Invokes method android.view.ViewGroup.makeOptionalFitsSystemWindows 3618 com.securegroup.assistant Invokes method android.content.Context.bindServiceAsUser 3618 com.securegroup.assistant Invokes method android.content.Context.bindServiceAsUser 3618 com.securegroup.assistant Invokes method android.view.ViewGroup.makeOptionalFitsSystemWindows 3618 com.securegroup.assistant Invokes method android.content.Context.bindServiceAsUser 3618 com.securegroup.assistant Invokes method dalvik.system.CloseGuard.get 3618 com.securegroup.assistant Invokes method dalvik.system.CloseGuard.open 3618 com.securegroup.assistant Acesses field javax.security.auth.x500.X500Principal.thisX500Name 3618 com.securegroup.assistant Acesses field javax.security.auth.x500.X500Principal.thisX500Name 3618 com.securegroup.assistant
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.securegroup.assistant/app_webview/GPUCache/indexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.securegroup.assistant/app_webview/GPUCache/index-dir/temp-indexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.securegroup.assistant/app_webview/Web DataMD5
dfea4f9a562d22c658ec695eca31ea04
SHA12e48be6baf86078d93f14fc38fe9f395c1c54261
SHA256a01b4f35e09bbcdf9753512d4d3ac0b82c8e2f09e2176fa4a5c2523909795b2b
SHA5128e0aab3c5f29a8737b4713b4a1622aa71b3574feabfb41a098f1326b80472c3fea053e759036c44df71aee1a8a1e9caf93f17a9eec88ab278062d7ed48907789
-
/data/user/0/com.securegroup.assistant/app_webview/Web Data-journalMD5
e011f72514eb6cdf9e9af42456b6d701
SHA1bd7c1b3be55836ae132410ce26a8a23c3352cf46
SHA2566681e8a8fbb7928721da5acc91407895a94f44538ea510794bb4a70f1eea0270
SHA5123a8a5d3b7fb91f686f7da7d9a3ca01d3a469a066cec585134d1ad27da5adc614c769e5a1294140225cf0144d2e526133ef8f1ff9ecf8701f0c794c50b08a787f
-
/data/user/0/com.securegroup.assistant/app_webview/metrics_guidMD5
f3bcb1fefc9812e2a9a19cf09055102b
SHA15aff13682ec85098eb5402eb8f2f026d8959d18a
SHA256701fc6dbcd4b84ed6dd728887d7d4965227b775639ca80c89d339720d1bbfcbd
SHA51224878d4c17f362249adb7e6e60aae2abe893ed0b07ebd70144a1893233e3f47ea434fb2169bd9a082f607c7a6670ce7106c80e6a6a667ae6a12061c507b9af1b
-
/data/user/0/com.securegroup.assistant/app_webview/metrics_guidMD5
f3bcb1fefc9812e2a9a19cf09055102b
SHA15aff13682ec85098eb5402eb8f2f026d8959d18a
SHA256701fc6dbcd4b84ed6dd728887d7d4965227b775639ca80c89d339720d1bbfcbd
SHA51224878d4c17f362249adb7e6e60aae2abe893ed0b07ebd70144a1893233e3f47ea434fb2169bd9a082f607c7a6670ce7106c80e6a6a667ae6a12061c507b9af1b
-
/data/user/0/com.securegroup.assistant/app_webview/variations_seed_newMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.securegroup.assistant/app_webview/variations_stampMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.securegroup.assistant/app_webview/webview_data.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.securegroup.assistant/cache/WebView/Crashpad/settings.datMD5
019bf377c93bbdf31dc6f7e31d1cfe48
SHA1f6a2647cc4646f7923adf03b786d371f625ebeaf
SHA256e6414fe103a8bd7490e164088160feadb0f27b271af0dd58a17faa7bf1c1b9de
SHA5129a265bfa5c2940667e7982b444daa1fd9812deb007e58caef144eec58b6789e94b11a17ead5ab1636c90059a890869d36210e89009498887ae5e29b05faf3083
-
/data/user/0/com.securegroup.assistant/cache/org.chromium.android_webview/Code Cache/js/indexMD5
54cb446f628b2ea4a5bce5769910512e
SHA1c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA5128f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
-
/data/user/0/com.securegroup.assistant/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-indexMD5
b8ba6bd590d88decc006330b88d36ada
SHA10dea3283e5d5e4193b2ad40dbe9e0dead291c1f5
SHA256b2431ffa2f9c7167dd669b60d59e294412899bf3d7376cc6b64491922c05bf62
SHA5127647ad45a56e1664f89323271b9f3cec67972c03436a97ea2e1843a6fd4ca4ebcde88f96cade3b97b74a4733bc37903f18be04b869f9d5f1fa17b156f6acfec6
-
/data/user/0/com.securegroup.assistant/shared_prefs/WebViewChromiumPrefs.xmlMD5
1357a1d7af06755d561a7ed916373baf
SHA14a0a0d8b4b81bba92924dd7cf53a44d438312729
SHA256647f3960ac648b24a8d9fa17f93f625437bd6f385636c56f10fefdd9cd447597
SHA51261f15a595e21cb7cbf0b1a5268da72b39ce767e43195b4b1a607125e6e1d3237aa382cffbeb122bee9111f01a61ed4aebc2bef6fa646891f43154b01c32d05d4
-
/product/app/webview/webview.apkMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/product/app/webview/webview.apkMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e