Analysis

  • max time kernel
    4166087s
  • max time network
    131s
  • platform
    android_x64
  • resource
    android-x64
  • submitted
    30-07-2021 16:46

General

  • Target

    kbbank.apk

  • Size

    5.2MB

  • MD5

    0b2c68e87d4ca2f0f24e56dc5d2f82bd

  • SHA1

    f5a8282f48c1895435fed871f774627182797777

  • SHA256

    2bb50b25ecf6263514bf1922967cb93e4768f96485ee3d9f9bb6417c950cc1c7

  • SHA512

    133fc8b462b1886b838854fd540b3969844d40e662303c2022dd0bab51f3c451120dbf8813841857e63325fb82f70d3fe581e80cafbc614db8592631dac8bb7e

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses reflection 9 IoCs

Processes

  • com.securegroup.assistant
    1⤵
    • Loads dropped Dex/Jar
    • Uses reflection
    PID:3618
  • com.securegroup.assistant:remote
    1⤵
      PID:3810

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.securegroup.assistant/app_webview/GPUCache/index
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.securegroup.assistant/app_webview/GPUCache/index-dir/temp-index
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.securegroup.assistant/app_webview/Web Data
      MD5

      dfea4f9a562d22c658ec695eca31ea04

      SHA1

      2e48be6baf86078d93f14fc38fe9f395c1c54261

      SHA256

      a01b4f35e09bbcdf9753512d4d3ac0b82c8e2f09e2176fa4a5c2523909795b2b

      SHA512

      8e0aab3c5f29a8737b4713b4a1622aa71b3574feabfb41a098f1326b80472c3fea053e759036c44df71aee1a8a1e9caf93f17a9eec88ab278062d7ed48907789

    • /data/user/0/com.securegroup.assistant/app_webview/Web Data-journal
      MD5

      e011f72514eb6cdf9e9af42456b6d701

      SHA1

      bd7c1b3be55836ae132410ce26a8a23c3352cf46

      SHA256

      6681e8a8fbb7928721da5acc91407895a94f44538ea510794bb4a70f1eea0270

      SHA512

      3a8a5d3b7fb91f686f7da7d9a3ca01d3a469a066cec585134d1ad27da5adc614c769e5a1294140225cf0144d2e526133ef8f1ff9ecf8701f0c794c50b08a787f

    • /data/user/0/com.securegroup.assistant/app_webview/metrics_guid
      MD5

      f3bcb1fefc9812e2a9a19cf09055102b

      SHA1

      5aff13682ec85098eb5402eb8f2f026d8959d18a

      SHA256

      701fc6dbcd4b84ed6dd728887d7d4965227b775639ca80c89d339720d1bbfcbd

      SHA512

      24878d4c17f362249adb7e6e60aae2abe893ed0b07ebd70144a1893233e3f47ea434fb2169bd9a082f607c7a6670ce7106c80e6a6a667ae6a12061c507b9af1b

    • /data/user/0/com.securegroup.assistant/app_webview/metrics_guid
      MD5

      f3bcb1fefc9812e2a9a19cf09055102b

      SHA1

      5aff13682ec85098eb5402eb8f2f026d8959d18a

      SHA256

      701fc6dbcd4b84ed6dd728887d7d4965227b775639ca80c89d339720d1bbfcbd

      SHA512

      24878d4c17f362249adb7e6e60aae2abe893ed0b07ebd70144a1893233e3f47ea434fb2169bd9a082f607c7a6670ce7106c80e6a6a667ae6a12061c507b9af1b

    • /data/user/0/com.securegroup.assistant/app_webview/variations_seed_new
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.securegroup.assistant/app_webview/variations_stamp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.securegroup.assistant/app_webview/webview_data.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.securegroup.assistant/cache/WebView/Crashpad/settings.dat
      MD5

      019bf377c93bbdf31dc6f7e31d1cfe48

      SHA1

      f6a2647cc4646f7923adf03b786d371f625ebeaf

      SHA256

      e6414fe103a8bd7490e164088160feadb0f27b271af0dd58a17faa7bf1c1b9de

      SHA512

      9a265bfa5c2940667e7982b444daa1fd9812deb007e58caef144eec58b6789e94b11a17ead5ab1636c90059a890869d36210e89009498887ae5e29b05faf3083

    • /data/user/0/com.securegroup.assistant/cache/org.chromium.android_webview/Code Cache/js/index
      MD5

      54cb446f628b2ea4a5bce5769910512e

      SHA1

      c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

      SHA256

      fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

      SHA512

      8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

    • /data/user/0/com.securegroup.assistant/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
      MD5

      b8ba6bd590d88decc006330b88d36ada

      SHA1

      0dea3283e5d5e4193b2ad40dbe9e0dead291c1f5

      SHA256

      b2431ffa2f9c7167dd669b60d59e294412899bf3d7376cc6b64491922c05bf62

      SHA512

      7647ad45a56e1664f89323271b9f3cec67972c03436a97ea2e1843a6fd4ca4ebcde88f96cade3b97b74a4733bc37903f18be04b869f9d5f1fa17b156f6acfec6

    • /data/user/0/com.securegroup.assistant/shared_prefs/WebViewChromiumPrefs.xml
      MD5

      1357a1d7af06755d561a7ed916373baf

      SHA1

      4a0a0d8b4b81bba92924dd7cf53a44d438312729

      SHA256

      647f3960ac648b24a8d9fa17f93f625437bd6f385636c56f10fefdd9cd447597

      SHA512

      61f15a595e21cb7cbf0b1a5268da72b39ce767e43195b4b1a607125e6e1d3237aa382cffbeb122bee9111f01a61ed4aebc2bef6fa646891f43154b01c32d05d4

    • /product/app/webview/webview.apk
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /product/app/webview/webview.apk
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e