Analysis

  • max time kernel
    265494s
  • max time network
    47s
  • platform
    android_x64
  • resource
    android-x64-arm64
  • submitted
    04-08-2021 06:20

General

  • Target

    Downloader1.apk

  • Size

    2.0MB

  • MD5

    d297775574e652fe71347ae004c5bc12

  • SHA1

    acb39ddb51c0951466399f90d85c8f0212847da5

  • SHA256

    79f485834e5fbd3df6a2209be3fdbaaa408838d77360e718d920627a35d52c7f

  • SHA512

    eef77bdebf3c4f66965e0d1440895c153a7b09d99bdb74a68f3c927b1c6ac568d94a5c0f59b3f176217829d804741a810c4b41cc06a5173de3b6576d7cc6bded

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses reflection 1 IoCs

Processes

  • com.test.inteligencia
    1⤵
    • Loads dropped Dex/Jar
    • Uses reflection
    PID:4240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.test.inteligencia/app_webview/.com.google.Chrome.i9lzXI
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.test.inteligencia/app_webview/Default/Web Data
    MD5

    536e58581641e767a8bf8eca3b8cde9e

    SHA1

    750a88189322e36147068f1c585f02163ff3a388

    SHA256

    3ba04fa6622801be4e625176b175ff75caf19c8966c13418bf1433433eefa1a0

    SHA512

    498da0911c702bc683cf153ce9b66044642378eafb79bffe0afd7f7460bd12a4c9bb424e1606550d8bbfb25dede34b5ad6ad1f7ee698c8d5ff67208625612319

  • /data/user/0/com.test.inteligencia/app_webview/Default/Web Data-journal
    MD5

    6d0ec9b80d39c63da4b55f6f71cf94ef

    SHA1

    47639d07d4dc3a145993e60c8c21e4ca9ff5376f

    SHA256

    efd746c6c6f1e9bebb7b7c2d2c827e2e5e4d6224e28043fc8a045d6ddc0c27d9

    SHA512

    1fcd2e64c5ecc5a62387921185811c68b0e07def6ed998daa8be95896b6aecf1c067ec4cafd9d73513e5e9c12df2085f04c780e9ec0ece80f2f07df0e32cbb4c

  • /data/user/0/com.test.inteligencia/app_webview/variations_seed_new
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.test.inteligencia/app_webview/variations_stamp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.test.inteligencia/app_webview/webview_data.lock
    MD5

    0e4a2e64ac0f82c7d443d6d24d73106b

    SHA1

    2ac2f5c7477288a2d4afe375ea15bdd1129a1dd0

    SHA256

    6142bb9c73943e3f3e6e7e3ad582473c75f92a48e749cbf660e2cebd4c26217b

    SHA512

    ce1ed0190f7ba4c6e407b522627d1e042c0ff98fa6a00f139158c1e174c523bdcba86e3f4c2f65066518b7f7ec7150093f0d670ae60e81076c9a9dccbcf4d702

  • /data/user/0/com.test.inteligencia/cache/WebView/Crashpad/settings.dat
    MD5

    d872fb4447e637a977f93e75841ec2e8

    SHA1

    b2c5ecaf9e6e1070fb412952e0a4573d469c66dc

    SHA256

    a39fb32aabc590864ea9639460281265bb58fce1fa66e00eac8edf9da59363dc

    SHA512

    957ea9cc2a6a254595c66047dd6a659465dc041c65729f784c0168f33bf0c1f90893fb0c672c8afdc94905fe855156a3b60c8e7c9a50c9a87edad0380ed1ac9d

  • /data/user/0/com.test.inteligencia/cache/WebView/Default/HTTP Cache/Code Cache/js/index
    MD5

    54cb446f628b2ea4a5bce5769910512e

    SHA1

    c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

    SHA256

    fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

    SHA512

    8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

  • /data/user/0/com.test.inteligencia/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
    MD5

    d46dd7469b513af8d15bfc783f9c36b9

    SHA1

    96c437830bc407762e9c00d6967bb74b87807cbf

    SHA256

    4a73514ec34625e2f56d21ca8e4485395954c4ec33686a4407b605641b979468

    SHA512

    2be6b6838e93b42ef9cd075ff19e0cff0fef3e131fe9f5ef7253bc9f2825c8d401a3245c58b53a0dcec92bbfa24c43c81fe92a9b77f3454fad220e3fde6c1e0c

  • /data/user/0/com.test.inteligencia/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
    MD5

    54cb446f628b2ea4a5bce5769910512e

    SHA1

    c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

    SHA256

    fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

    SHA512

    8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

  • /data/user/0/com.test.inteligencia/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.test.inteligencia/cache/WebView/font_unique_name_table.pb
    MD5

    b18833d483828180924a6d4048fca1a0

    SHA1

    d7edde78cc26221c9455a87ca3eca8960b6673a8

    SHA256

    d9c4ea0a7c399884f8a908a33a4d675a64b557b50916e62ab96fa2213e6d4801

    SHA512

    11e6bf7e067884138dcd6908e311321a9eca1e4926323f49736f9dfdebd4b548064beacc356f78e3f32a99769109b154e145ef1162e6a9547aca878f0dd4ee7c

  • /data/user/0/com.test.inteligencia/files/73c4f53e.dex
    MD5

    aefc20d81c7b9ebe3f507224c070a927

    SHA1

    9f9ed4e377d81bf47a0a858d07b99755b7a37158

    SHA256

    a92d0d67a617aa61f166837ecf3d75f14fa83e82cb411dee4c9d5ba4b22cd9ee

    SHA512

    45240e0897f75236c3b0061135288928df6f2d40c284f6b6bafafd30662f9c64faa8fba5280852a2aac6d50b46080eead1789e572dce20082df5736142b7be65

  • /data/user/0/com.test.inteligencia/files/73c4f53e.dex
    MD5

    af8cd8ab638f38c6d717d755f1a01b18

    SHA1

    6759747af33272533d71e8468008dd269ea66f9e

    SHA256

    73211cb6e87c0b13d233a2d8c610039943f52a6e43b1cb00ae139d9accc2e816

    SHA512

    53b9412f989d8633acedb4aa1426d070429305870ae1d7cc460e11874a54667a83c7a3b8ea07c3b3073f8bb8b6b0f1a1567c800f904e21dd972fe1b6aab2d55b

  • /data/user/0/com.test.inteligencia/files/BGEaUZrY
    MD5

    4e46db46fbc525bef525b69f3f72d413

    SHA1

    48eccb68b1af55516223ac494babdd9a33400392

    SHA256

    0df7d49d21f28bd6a39a99f991de51106bcf66b7994b4ca0c1eb08bd13e70c2b

    SHA512

    bf6499116225d3c81054790c4ec3c5f2b325e8fde78072235fb7559b9e60ee8c25e697a4f9ee7390bd807f10716b4490f93550dbfcfce824ac6d05c7225a33d1

  • /data/user/0/com.test.inteligencia/files/TrPJFdsN
    MD5

    fa5b5e597f764e91b862a0e16a2da330

    SHA1

    572244ef0d199ede94583150371c68c15fca6976

    SHA256

    ff20f4392f6178cda6f2214116805cb1408133076aafcc3cf07be0f1fa8d7d68

    SHA512

    2833a74c43642a0f16712d0069adbb01412674027aba5e70d3b7cca5934a378f0eb486cf1635a0af44025c98a27089279dd221613794dcd957440b4bcdbaa074

  • /data/user/0/com.test.inteligencia/no_backup/com.google.InstanceId.properties
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.test.inteligencia/no_backup/com.google.android.gms.appid-no-backup
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.test.inteligencia/shared_prefs/WebViewChromiumPrefs.xml
    MD5

    97ccd9a2b2063143df56b6937f961ca4

    SHA1

    5e78a91ae5df289ce83443cb7d5589dd3504fb5d

    SHA256

    248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

    SHA512

    86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

  • /data/user/0/com.test.inteligencia/shared_prefs/com.google.android.gms.appid.xml
    MD5

    672c89239dc6043bb4f583846cff0c37

    SHA1

    dc210a6d89e36a0608c57cbb027aee0488defc57

    SHA256

    8ea5fbcdf40dbdf545077f20040ddf971073a8ba2c328a31cd7ed360970f498a

    SHA512

    8c81be2209cdd18ffea30838bb759b4679eb880a8ac32250374e3cf052aeb89da9eb875700eb1c0b13c319c3257de3d71281adc7e53e049c43b29d9b720844d5

  • /data/user/0/com.test.inteligencia/shared_prefs/com.google.android.gms.appid.xml
    MD5

    ba0ff2b6b0e8ffecac8bf79f754a16f2

    SHA1

    2565f5e237a363f51fb77a670b8cbdbb3b26d17d

    SHA256

    0f383bf212ee43f4f68f2b2193a790578818826f34858b38ed6a9ced8b01a952

    SHA512

    b0782ef429a9494fa5d8afe67ae2759a347c76ccf5ff7aa86a6e99d62c4fbce5b16760fee49d2fc2db67ba9de30299f120a9874d386e8a14c7bd01a0a668f928

  • /data/user/0/com.test.inteligencia/shared_prefs/com.test.inteligencia_preferences.xml
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.test.inteligencia/shared_prefs/com.test.inteligencia_preferences.xml
    MD5

    64a265364b441f2228ea2217d0c33013

    SHA1

    cf4333445b20fa0371d4a5de31b75e1782a6a92e

    SHA256

    b22c9f3e754a1322128f917c75a636b725b7cfd7871b7311bef509e5a5df4d92

    SHA512

    e1de89522d96c367e2c9dbc9e3ae9aed7e81285b26ebb64f8af669edc366031c1c2c65aca4970c5efaab011f34377852d52db6efa93f3bb8573dc95dbc739e3a

  • /product/app/TrichromeLibrary/TrichromeLibrary.apk
    MD5

    39528daeaf7245ec0be5c52098c44a95

    SHA1

    e10152848a684f53e9dc35c38d99ff0add509227

    SHA256

    4d59ccc291c4f9a6170a14baa457d50111354c8ee389043b6b40b08092da835b

    SHA512

    fa5ea98f323a05d2da2934021cd42f3791cb9c11a391ff0d026bf66a1af48f008c465f8eaa1580949c125cb758b16f47efece125919bda440876dbb843dc3e09

  • /product/app/TrichromeLibrary/TrichromeLibrary.apk