Analysis
-
max time kernel
265494s -
max time network
47s -
platform
android_x64 -
resource
android-x64-arm64 -
submitted
04-08-2021 06:20
Static task
static1
Behavioral task
behavioral1
Sample
Downloader1.apk
Resource
android-x86-arm
Behavioral task
behavioral2
Sample
Downloader1.apk
Resource
android-x64-arm64
Behavioral task
behavioral3
Sample
Downloader1.apk
Resource
android-x64
General
-
Target
Downloader1.apk
-
Size
2.0MB
-
MD5
d297775574e652fe71347ae004c5bc12
-
SHA1
acb39ddb51c0951466399f90d85c8f0212847da5
-
SHA256
79f485834e5fbd3df6a2209be3fdbaaa408838d77360e718d920627a35d52c7f
-
SHA512
eef77bdebf3c4f66965e0d1440895c153a7b09d99bdb74a68f3c927b1c6ac568d94a5c0f59b3f176217829d804741a810c4b41cc06a5173de3b6576d7cc6bded
Malware Config
Signatures
-
Loads dropped Dex/Jar 3 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.test.inteligenciaioc pid process /data/user/0/com.test.inteligencia/files/73c4f53e.dex 4240 com.test.inteligencia /product/app/TrichromeLibrary/TrichromeLibrary.apk 4240 com.test.inteligencia /product/app/TrichromeLibrary/TrichromeLibrary.apk 4240 com.test.inteligencia -
Uses reflection 1 IoCs
Processes:
com.test.inteligenciadescription pid process Invokes method android.util.Log.d 4240 com.test.inteligencia
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.test.inteligencia/app_webview/.com.google.Chrome.i9lzXIMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.test.inteligencia/app_webview/Default/Web DataMD5
536e58581641e767a8bf8eca3b8cde9e
SHA1750a88189322e36147068f1c585f02163ff3a388
SHA2563ba04fa6622801be4e625176b175ff75caf19c8966c13418bf1433433eefa1a0
SHA512498da0911c702bc683cf153ce9b66044642378eafb79bffe0afd7f7460bd12a4c9bb424e1606550d8bbfb25dede34b5ad6ad1f7ee698c8d5ff67208625612319
-
/data/user/0/com.test.inteligencia/app_webview/Default/Web Data-journalMD5
6d0ec9b80d39c63da4b55f6f71cf94ef
SHA147639d07d4dc3a145993e60c8c21e4ca9ff5376f
SHA256efd746c6c6f1e9bebb7b7c2d2c827e2e5e4d6224e28043fc8a045d6ddc0c27d9
SHA5121fcd2e64c5ecc5a62387921185811c68b0e07def6ed998daa8be95896b6aecf1c067ec4cafd9d73513e5e9c12df2085f04c780e9ec0ece80f2f07df0e32cbb4c
-
/data/user/0/com.test.inteligencia/app_webview/variations_seed_newMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.test.inteligencia/app_webview/variations_stampMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.test.inteligencia/app_webview/webview_data.lockMD5
0e4a2e64ac0f82c7d443d6d24d73106b
SHA12ac2f5c7477288a2d4afe375ea15bdd1129a1dd0
SHA2566142bb9c73943e3f3e6e7e3ad582473c75f92a48e749cbf660e2cebd4c26217b
SHA512ce1ed0190f7ba4c6e407b522627d1e042c0ff98fa6a00f139158c1e174c523bdcba86e3f4c2f65066518b7f7ec7150093f0d670ae60e81076c9a9dccbcf4d702
-
/data/user/0/com.test.inteligencia/cache/WebView/Crashpad/settings.datMD5
d872fb4447e637a977f93e75841ec2e8
SHA1b2c5ecaf9e6e1070fb412952e0a4573d469c66dc
SHA256a39fb32aabc590864ea9639460281265bb58fce1fa66e00eac8edf9da59363dc
SHA512957ea9cc2a6a254595c66047dd6a659465dc041c65729f784c0168f33bf0c1f90893fb0c672c8afdc94905fe855156a3b60c8e7c9a50c9a87edad0380ed1ac9d
-
/data/user/0/com.test.inteligencia/cache/WebView/Default/HTTP Cache/Code Cache/js/indexMD5
54cb446f628b2ea4a5bce5769910512e
SHA1c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA5128f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
-
/data/user/0/com.test.inteligencia/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-indexMD5
d46dd7469b513af8d15bfc783f9c36b9
SHA196c437830bc407762e9c00d6967bb74b87807cbf
SHA2564a73514ec34625e2f56d21ca8e4485395954c4ec33686a4407b605641b979468
SHA5122be6b6838e93b42ef9cd075ff19e0cff0fef3e131fe9f5ef7253bc9f2825c8d401a3245c58b53a0dcec92bbfa24c43c81fe92a9b77f3454fad220e3fde6c1e0c
-
/data/user/0/com.test.inteligencia/cache/WebView/Default/HTTP Cache/Code Cache/wasm/indexMD5
54cb446f628b2ea4a5bce5769910512e
SHA1c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA5128f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
-
/data/user/0/com.test.inteligencia/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-indexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.test.inteligencia/cache/WebView/font_unique_name_table.pbMD5
b18833d483828180924a6d4048fca1a0
SHA1d7edde78cc26221c9455a87ca3eca8960b6673a8
SHA256d9c4ea0a7c399884f8a908a33a4d675a64b557b50916e62ab96fa2213e6d4801
SHA51211e6bf7e067884138dcd6908e311321a9eca1e4926323f49736f9dfdebd4b548064beacc356f78e3f32a99769109b154e145ef1162e6a9547aca878f0dd4ee7c
-
/data/user/0/com.test.inteligencia/files/73c4f53e.dexMD5
aefc20d81c7b9ebe3f507224c070a927
SHA19f9ed4e377d81bf47a0a858d07b99755b7a37158
SHA256a92d0d67a617aa61f166837ecf3d75f14fa83e82cb411dee4c9d5ba4b22cd9ee
SHA51245240e0897f75236c3b0061135288928df6f2d40c284f6b6bafafd30662f9c64faa8fba5280852a2aac6d50b46080eead1789e572dce20082df5736142b7be65
-
/data/user/0/com.test.inteligencia/files/73c4f53e.dexMD5
af8cd8ab638f38c6d717d755f1a01b18
SHA16759747af33272533d71e8468008dd269ea66f9e
SHA25673211cb6e87c0b13d233a2d8c610039943f52a6e43b1cb00ae139d9accc2e816
SHA51253b9412f989d8633acedb4aa1426d070429305870ae1d7cc460e11874a54667a83c7a3b8ea07c3b3073f8bb8b6b0f1a1567c800f904e21dd972fe1b6aab2d55b
-
/data/user/0/com.test.inteligencia/files/BGEaUZrYMD5
4e46db46fbc525bef525b69f3f72d413
SHA148eccb68b1af55516223ac494babdd9a33400392
SHA2560df7d49d21f28bd6a39a99f991de51106bcf66b7994b4ca0c1eb08bd13e70c2b
SHA512bf6499116225d3c81054790c4ec3c5f2b325e8fde78072235fb7559b9e60ee8c25e697a4f9ee7390bd807f10716b4490f93550dbfcfce824ac6d05c7225a33d1
-
/data/user/0/com.test.inteligencia/files/TrPJFdsNMD5
fa5b5e597f764e91b862a0e16a2da330
SHA1572244ef0d199ede94583150371c68c15fca6976
SHA256ff20f4392f6178cda6f2214116805cb1408133076aafcc3cf07be0f1fa8d7d68
SHA5122833a74c43642a0f16712d0069adbb01412674027aba5e70d3b7cca5934a378f0eb486cf1635a0af44025c98a27089279dd221613794dcd957440b4bcdbaa074
-
/data/user/0/com.test.inteligencia/no_backup/com.google.InstanceId.propertiesMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.test.inteligencia/no_backup/com.google.android.gms.appid-no-backupMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.test.inteligencia/shared_prefs/WebViewChromiumPrefs.xmlMD5
97ccd9a2b2063143df56b6937f961ca4
SHA15e78a91ae5df289ce83443cb7d5589dd3504fb5d
SHA256248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
SHA51286c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b
-
/data/user/0/com.test.inteligencia/shared_prefs/com.google.android.gms.appid.xmlMD5
672c89239dc6043bb4f583846cff0c37
SHA1dc210a6d89e36a0608c57cbb027aee0488defc57
SHA2568ea5fbcdf40dbdf545077f20040ddf971073a8ba2c328a31cd7ed360970f498a
SHA5128c81be2209cdd18ffea30838bb759b4679eb880a8ac32250374e3cf052aeb89da9eb875700eb1c0b13c319c3257de3d71281adc7e53e049c43b29d9b720844d5
-
/data/user/0/com.test.inteligencia/shared_prefs/com.google.android.gms.appid.xmlMD5
ba0ff2b6b0e8ffecac8bf79f754a16f2
SHA12565f5e237a363f51fb77a670b8cbdbb3b26d17d
SHA2560f383bf212ee43f4f68f2b2193a790578818826f34858b38ed6a9ced8b01a952
SHA512b0782ef429a9494fa5d8afe67ae2759a347c76ccf5ff7aa86a6e99d62c4fbce5b16760fee49d2fc2db67ba9de30299f120a9874d386e8a14c7bd01a0a668f928
-
/data/user/0/com.test.inteligencia/shared_prefs/com.test.inteligencia_preferences.xmlMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.test.inteligencia/shared_prefs/com.test.inteligencia_preferences.xmlMD5
64a265364b441f2228ea2217d0c33013
SHA1cf4333445b20fa0371d4a5de31b75e1782a6a92e
SHA256b22c9f3e754a1322128f917c75a636b725b7cfd7871b7311bef509e5a5df4d92
SHA512e1de89522d96c367e2c9dbc9e3ae9aed7e81285b26ebb64f8af669edc366031c1c2c65aca4970c5efaab011f34377852d52db6efa93f3bb8573dc95dbc739e3a
-
/product/app/TrichromeLibrary/TrichromeLibrary.apkMD5
39528daeaf7245ec0be5c52098c44a95
SHA1e10152848a684f53e9dc35c38d99ff0add509227
SHA2564d59ccc291c4f9a6170a14baa457d50111354c8ee389043b6b40b08092da835b
SHA512fa5ea98f323a05d2da2934021cd42f3791cb9c11a391ff0d026bf66a1af48f008c465f8eaa1580949c125cb758b16f47efece125919bda440876dbb843dc3e09
-
/product/app/TrichromeLibrary/TrichromeLibrary.apk