Analysis
-
max time kernel
277510s -
max time network
56s -
platform
android_x64 -
resource
android-x64-arm64 -
submitted
04-08-2021 09:40
Static task
static1
Behavioral task
behavioral1
Sample
Download.apk
Resource
android-x86-arm
Behavioral task
behavioral2
Sample
Download.apk
Resource
android-x64-arm64
Behavioral task
behavioral3
Sample
Download.apk
Resource
android-x64
General
-
Target
Download.apk
-
Size
2.0MB
-
MD5
98be798cc5f3e4ccb3a92cc24c9bab79
-
SHA1
e813dc8498fe8a115b5d023878bbad48f6206108
-
SHA256
22c4c4a858675eded06684667cb7d325477af8a3dde8f55c10e765cfd65ea797
-
SHA512
3841dbe18c81262f5679684cb854bffd49107dc44d35d3fa16f506fb6fc1a231c818f1eff1a90e12ecaf156eb37b9479e8a1080d6e8e72fa8c0fe7d0e022a47a
Malware Config
Signatures
-
Loads dropped Dex/Jar 3 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.pix.art.TSRioc pid process /data/user/0/com.pix.art.TSR/files/c73172c6.dex 4023 com.pix.art.TSR /product/app/TrichromeLibrary/TrichromeLibrary.apk 4023 com.pix.art.TSR /product/app/TrichromeLibrary/TrichromeLibrary.apk 4023 com.pix.art.TSR -
Uses reflection 5 IoCs
Processes:
com.pix.art.TSRdescription pid process Invokes method android.util.Log.d 4023 com.pix.art.TSR Invokes method dalvik.system.CloseGuard.get 4023 com.pix.art.TSR Invokes method dalvik.system.CloseGuard.open 4023 com.pix.art.TSR Invokes method android.security.NetworkSecurityPolicy.getInstance 4023 com.pix.art.TSR Invokes method android.security.NetworkSecurityPolicy.isCleartextTrafficPermitted 4023 com.pix.art.TSR
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.pix.art.TSR/app_webview/.com.google.Chrome.EJZsU0MD5
857df9e01549d25a8a77821c3ce2b7a0
SHA14d6a1e8e69a86d1a9e3aca8b5522f5046667e89e
SHA256d63e77a496fb63e00014f12d65fd8f23a91cc822dcda50dc21eefc14e6b3971e
SHA512d3fc96c30510e8fd3787c242a30d9d0d3a55c1848c403a4633cf00e0dc40d5bd5437f62e9506504b2857573191133df39faab51eb8d231e590aacca5fa8b6dbb
-
/data/user/0/com.pix.art.TSR/app_webview/Default/Web DataMD5
536e58581641e767a8bf8eca3b8cde9e
SHA1750a88189322e36147068f1c585f02163ff3a388
SHA2563ba04fa6622801be4e625176b175ff75caf19c8966c13418bf1433433eefa1a0
SHA512498da0911c702bc683cf153ce9b66044642378eafb79bffe0afd7f7460bd12a4c9bb424e1606550d8bbfb25dede34b5ad6ad1f7ee698c8d5ff67208625612319
-
/data/user/0/com.pix.art.TSR/app_webview/Default/Web Data-journalMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/app_webview/variations_seed_newMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/app_webview/variations_stampMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/app_webview/webview_data.lockMD5
67e505b88718ecb28e129d76788724dc
SHA1969f3b136375a03c7a7dadac333178ff450c32c2
SHA256e49f282670d03719495b8ccb025adc02518cd64b00e94ced6feedad3bd68dbee
SHA512e4213c4dcbcb6a8a9f3143bc76581b41efb6fb9d620787a160eada6a3d073de685d1a2e0d26b6c6feacbcd0468a94a19b65dccc0d80a98c02b380e804975b116
-
/data/user/0/com.pix.art.TSR/cache/WebView/Crashpad/settings.datMD5
102b9257e0c08777adb2bfbeabaa6680
SHA1a6e2f693aee0bb3eb30f13a9dd10f1914ee23ed2
SHA256d40da3fc19020ea8deae2aeaf918499a504027fe4d0eadb24ed9a89ef41744e3
SHA512d2c2f96da6badb68710502b6f9fabcf393ed9c87fef0cb3f7dcbe040105ca5d0792f378cc263b80efd2ac70ad1d586ca740b4cc92c6e1864806bfff055958647
-
/data/user/0/com.pix.art.TSR/cache/WebView/Default/HTTP Cache/Code Cache/js/indexMD5
54cb446f628b2ea4a5bce5769910512e
SHA1c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA5128f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
-
/data/user/0/com.pix.art.TSR/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-indexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/cache/WebView/Default/HTTP Cache/Code Cache/wasm/indexMD5
54cb446f628b2ea4a5bce5769910512e
SHA1c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA5128f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
-
/data/user/0/com.pix.art.TSR/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-indexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/cache/WebView/font_unique_name_table.pbMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/files/BGEaUZrYMD5
c0e4c7f8f07ed32bc67a18ed29075b65
SHA137de93a98eb702f6f40294794f4c09288a97dbaf
SHA256e7abb8dd3d0dab2a6edc7c154437acf1d10008ee3a5945a9ca35ff8da8de804c
SHA5122ab7ff627b1ac9b810905232802077a7425fad46a7a3d5251d9d9431529b893ab7795e2d8412efebed6271d1dd79d1030dbc88a5f93d46b313a0b54c4b153619
-
/data/user/0/com.pix.art.TSR/files/TrPJFdsNMD5
744d31c7f430917da8149df0a712cf67
SHA16b1e20ed0a715e9b00d8d66c75c463681d9e9a55
SHA256fe40917ec0085ab60e9f66f47d804f0b4b9fb1e27c750de84c4032bc022b7a01
SHA512a0ad775b099284b1bb99d018373ba0fb066a5d836983434c3eaaa58f214ac59dda4055897783f97c87e9de7365976d13604ba6c51e0ab8b5a6a6973b3e3473e2
-
/data/user/0/com.pix.art.TSR/files/c73172c6.dexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/files/c73172c6.dexMD5
fc406457d5a9db94b23ce58e83badca9
SHA133f2d38a55a0653c6f9083009ed501c3cf79c660
SHA2566de495a550f42f60319b99f1dc535e50cb18bea5c5636cb349d109c9b4407a05
SHA512e4ff32973a7e7b2f50a2254eb010ab2500b728f2b89f1a3b0a3e5a5280c6d1975e4b47b9f8fd7bfa4021f07b01bb4fc85faac98e169bce19307d11104896321b
-
/data/user/0/com.pix.art.TSR/no_backup/com.google.InstanceId.propertiesMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/no_backup/com.google.android.gms.appid-no-backupMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/shared_prefs/WebViewChromiumPrefs.xmlMD5
97ccd9a2b2063143df56b6937f961ca4
SHA15e78a91ae5df289ce83443cb7d5589dd3504fb5d
SHA256248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
SHA51286c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b
-
/data/user/0/com.pix.art.TSR/shared_prefs/com.google.android.gms.appid.xmlMD5
c0a8329e22d981b2ba82d6f5e7cd20f7
SHA1fce8922c0ac401f6908482b510baeea92b1504a2
SHA256fbd50bc8d4069c5a220b0cbe46a8475d69ee69ca0e9c755e58978da092eaab14
SHA5123247c873599911665295d6d07849b1d4e2aefe34182d1373f9f448040a5a3970ae768dffd4f154365426f60b173aa6f2d5f099333d7ea5c44b25e603555d599c
-
/data/user/0/com.pix.art.TSR/shared_prefs/com.google.android.gms.appid.xmlMD5
af4e1b478cfb9676213d6bdc4662f148
SHA1ba899d51e4daeac7faf6486adace1891e63c2997
SHA2568d1ac06e28f5d14486486cb0001d239f8865ca71187794c904d98bcaf9c43cc9
SHA5120aa8243f2ef2e2fca59214d8aac4677ff025470dc34f7caa64d0ac975528ee86e3c922b0530c5bed33da66c430c4a1fae10944d00d78de4596ca80e22a3d1763
-
/data/user/0/com.pix.art.TSR/shared_prefs/com.pix.art.TSR_preferences.xmlMD5
2c2d46cc782f81fc791ba4c7849f445d
SHA197730eec99e36fa9c79968b35e58e8844f97c1ac
SHA256c1df0b09d46b102c29e9d984b205622044d3712f8ecb6834b7b3572532f2c0e9
SHA512574411c521e1180cc1250587c0eac806744665276393c810d44ca25e17cf870e6cbc7a22454937a32f7585284f3c2befa9b55957e049da61e233b9e32cd85b11
-
/data/user/0/com.pix.art.TSR/shared_prefs/com.pix.art.TSR_preferences.xmlMD5
f78d4bf6fb5c30d2ca7be43cecd4d646
SHA1b2dc5974c3e54af894a4b4bc0ba6c76a087544f2
SHA256545852732255a31edf6ccf7049fa1236d8791b40459f6825583b09c0cec193ad
SHA512d66b4c823628f84fa8071475b6a649fdb02d39f13bbefdd915d1d0c4bf75fc135ea2733e18dc3c8f22c9a4be9760cf05c8b76e57dd96fd283068ff5e7a044d95
-
/data/user/0/com.pix.art.TSR/shared_prefs/com.pix.art.TSR_preferences.xmlMD5
586b641ca04af0a354fe8bfc27801690
SHA1e2ddbaceb576c0c04dd5bc471e17bef7abe1ef98
SHA2567ea2db13f945bf348b0c78bb67be8e7749b2c14a60098027880037c80367459e
SHA5123fa97776be202e58c0450584490d1f9e3a0f49fcb233c5be335d1e780230fe86f89323efd82dc7df88c274564c3f877a6c79e98acf16d7b6013f9c260b3c518b
-
/product/app/TrichromeLibrary/TrichromeLibrary.apkMD5
39528daeaf7245ec0be5c52098c44a95
SHA1e10152848a684f53e9dc35c38d99ff0add509227
SHA2564d59ccc291c4f9a6170a14baa457d50111354c8ee389043b6b40b08092da835b
SHA512fa5ea98f323a05d2da2934021cd42f3791cb9c11a391ff0d026bf66a1af48f008c465f8eaa1580949c125cb758b16f47efece125919bda440876dbb843dc3e09
-
/product/app/TrichromeLibrary/TrichromeLibrary.apkMD5
39528daeaf7245ec0be5c52098c44a95
SHA1e10152848a684f53e9dc35c38d99ff0add509227
SHA2564d59ccc291c4f9a6170a14baa457d50111354c8ee389043b6b40b08092da835b
SHA512fa5ea98f323a05d2da2934021cd42f3791cb9c11a391ff0d026bf66a1af48f008c465f8eaa1580949c125cb758b16f47efece125919bda440876dbb843dc3e09