Analysis

  • max time kernel
    277510s
  • max time network
    56s
  • platform
    android_x64
  • resource
    android-x64-arm64
  • submitted
    04-08-2021 09:40

General

  • Target

    Download.apk

  • Size

    2.0MB

  • MD5

    98be798cc5f3e4ccb3a92cc24c9bab79

  • SHA1

    e813dc8498fe8a115b5d023878bbad48f6206108

  • SHA256

    22c4c4a858675eded06684667cb7d325477af8a3dde8f55c10e765cfd65ea797

  • SHA512

    3841dbe18c81262f5679684cb854bffd49107dc44d35d3fa16f506fb6fc1a231c818f1eff1a90e12ecaf156eb37b9479e8a1080d6e8e72fa8c0fe7d0e022a47a

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses reflection 5 IoCs

Processes

  • com.pix.art.TSR
    1⤵
    • Loads dropped Dex/Jar
    • Uses reflection
    PID:4023

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.pix.art.TSR/app_webview/.com.google.Chrome.EJZsU0
    MD5

    857df9e01549d25a8a77821c3ce2b7a0

    SHA1

    4d6a1e8e69a86d1a9e3aca8b5522f5046667e89e

    SHA256

    d63e77a496fb63e00014f12d65fd8f23a91cc822dcda50dc21eefc14e6b3971e

    SHA512

    d3fc96c30510e8fd3787c242a30d9d0d3a55c1848c403a4633cf00e0dc40d5bd5437f62e9506504b2857573191133df39faab51eb8d231e590aacca5fa8b6dbb

  • /data/user/0/com.pix.art.TSR/app_webview/Default/Web Data
    MD5

    536e58581641e767a8bf8eca3b8cde9e

    SHA1

    750a88189322e36147068f1c585f02163ff3a388

    SHA256

    3ba04fa6622801be4e625176b175ff75caf19c8966c13418bf1433433eefa1a0

    SHA512

    498da0911c702bc683cf153ce9b66044642378eafb79bffe0afd7f7460bd12a4c9bb424e1606550d8bbfb25dede34b5ad6ad1f7ee698c8d5ff67208625612319

  • /data/user/0/com.pix.art.TSR/app_webview/Default/Web Data-journal
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.pix.art.TSR/app_webview/variations_seed_new
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.pix.art.TSR/app_webview/variations_stamp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.pix.art.TSR/app_webview/webview_data.lock
    MD5

    67e505b88718ecb28e129d76788724dc

    SHA1

    969f3b136375a03c7a7dadac333178ff450c32c2

    SHA256

    e49f282670d03719495b8ccb025adc02518cd64b00e94ced6feedad3bd68dbee

    SHA512

    e4213c4dcbcb6a8a9f3143bc76581b41efb6fb9d620787a160eada6a3d073de685d1a2e0d26b6c6feacbcd0468a94a19b65dccc0d80a98c02b380e804975b116

  • /data/user/0/com.pix.art.TSR/cache/WebView/Crashpad/settings.dat
    MD5

    102b9257e0c08777adb2bfbeabaa6680

    SHA1

    a6e2f693aee0bb3eb30f13a9dd10f1914ee23ed2

    SHA256

    d40da3fc19020ea8deae2aeaf918499a504027fe4d0eadb24ed9a89ef41744e3

    SHA512

    d2c2f96da6badb68710502b6f9fabcf393ed9c87fef0cb3f7dcbe040105ca5d0792f378cc263b80efd2ac70ad1d586ca740b4cc92c6e1864806bfff055958647

  • /data/user/0/com.pix.art.TSR/cache/WebView/Default/HTTP Cache/Code Cache/js/index
    MD5

    54cb446f628b2ea4a5bce5769910512e

    SHA1

    c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

    SHA256

    fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

    SHA512

    8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

  • /data/user/0/com.pix.art.TSR/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.pix.art.TSR/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
    MD5

    54cb446f628b2ea4a5bce5769910512e

    SHA1

    c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

    SHA256

    fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

    SHA512

    8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

  • /data/user/0/com.pix.art.TSR/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.pix.art.TSR/cache/WebView/font_unique_name_table.pb
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.pix.art.TSR/files/BGEaUZrY
    MD5

    c0e4c7f8f07ed32bc67a18ed29075b65

    SHA1

    37de93a98eb702f6f40294794f4c09288a97dbaf

    SHA256

    e7abb8dd3d0dab2a6edc7c154437acf1d10008ee3a5945a9ca35ff8da8de804c

    SHA512

    2ab7ff627b1ac9b810905232802077a7425fad46a7a3d5251d9d9431529b893ab7795e2d8412efebed6271d1dd79d1030dbc88a5f93d46b313a0b54c4b153619

  • /data/user/0/com.pix.art.TSR/files/TrPJFdsN
    MD5

    744d31c7f430917da8149df0a712cf67

    SHA1

    6b1e20ed0a715e9b00d8d66c75c463681d9e9a55

    SHA256

    fe40917ec0085ab60e9f66f47d804f0b4b9fb1e27c750de84c4032bc022b7a01

    SHA512

    a0ad775b099284b1bb99d018373ba0fb066a5d836983434c3eaaa58f214ac59dda4055897783f97c87e9de7365976d13604ba6c51e0ab8b5a6a6973b3e3473e2

  • /data/user/0/com.pix.art.TSR/files/c73172c6.dex
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.pix.art.TSR/files/c73172c6.dex
    MD5

    fc406457d5a9db94b23ce58e83badca9

    SHA1

    33f2d38a55a0653c6f9083009ed501c3cf79c660

    SHA256

    6de495a550f42f60319b99f1dc535e50cb18bea5c5636cb349d109c9b4407a05

    SHA512

    e4ff32973a7e7b2f50a2254eb010ab2500b728f2b89f1a3b0a3e5a5280c6d1975e4b47b9f8fd7bfa4021f07b01bb4fc85faac98e169bce19307d11104896321b

  • /data/user/0/com.pix.art.TSR/no_backup/com.google.InstanceId.properties
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.pix.art.TSR/no_backup/com.google.android.gms.appid-no-backup
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.pix.art.TSR/shared_prefs/WebViewChromiumPrefs.xml
    MD5

    97ccd9a2b2063143df56b6937f961ca4

    SHA1

    5e78a91ae5df289ce83443cb7d5589dd3504fb5d

    SHA256

    248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

    SHA512

    86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

  • /data/user/0/com.pix.art.TSR/shared_prefs/com.google.android.gms.appid.xml
    MD5

    c0a8329e22d981b2ba82d6f5e7cd20f7

    SHA1

    fce8922c0ac401f6908482b510baeea92b1504a2

    SHA256

    fbd50bc8d4069c5a220b0cbe46a8475d69ee69ca0e9c755e58978da092eaab14

    SHA512

    3247c873599911665295d6d07849b1d4e2aefe34182d1373f9f448040a5a3970ae768dffd4f154365426f60b173aa6f2d5f099333d7ea5c44b25e603555d599c

  • /data/user/0/com.pix.art.TSR/shared_prefs/com.google.android.gms.appid.xml
    MD5

    af4e1b478cfb9676213d6bdc4662f148

    SHA1

    ba899d51e4daeac7faf6486adace1891e63c2997

    SHA256

    8d1ac06e28f5d14486486cb0001d239f8865ca71187794c904d98bcaf9c43cc9

    SHA512

    0aa8243f2ef2e2fca59214d8aac4677ff025470dc34f7caa64d0ac975528ee86e3c922b0530c5bed33da66c430c4a1fae10944d00d78de4596ca80e22a3d1763

  • /data/user/0/com.pix.art.TSR/shared_prefs/com.pix.art.TSR_preferences.xml
    MD5

    2c2d46cc782f81fc791ba4c7849f445d

    SHA1

    97730eec99e36fa9c79968b35e58e8844f97c1ac

    SHA256

    c1df0b09d46b102c29e9d984b205622044d3712f8ecb6834b7b3572532f2c0e9

    SHA512

    574411c521e1180cc1250587c0eac806744665276393c810d44ca25e17cf870e6cbc7a22454937a32f7585284f3c2befa9b55957e049da61e233b9e32cd85b11

  • /data/user/0/com.pix.art.TSR/shared_prefs/com.pix.art.TSR_preferences.xml
    MD5

    f78d4bf6fb5c30d2ca7be43cecd4d646

    SHA1

    b2dc5974c3e54af894a4b4bc0ba6c76a087544f2

    SHA256

    545852732255a31edf6ccf7049fa1236d8791b40459f6825583b09c0cec193ad

    SHA512

    d66b4c823628f84fa8071475b6a649fdb02d39f13bbefdd915d1d0c4bf75fc135ea2733e18dc3c8f22c9a4be9760cf05c8b76e57dd96fd283068ff5e7a044d95

  • /data/user/0/com.pix.art.TSR/shared_prefs/com.pix.art.TSR_preferences.xml
    MD5

    586b641ca04af0a354fe8bfc27801690

    SHA1

    e2ddbaceb576c0c04dd5bc471e17bef7abe1ef98

    SHA256

    7ea2db13f945bf348b0c78bb67be8e7749b2c14a60098027880037c80367459e

    SHA512

    3fa97776be202e58c0450584490d1f9e3a0f49fcb233c5be335d1e780230fe86f89323efd82dc7df88c274564c3f877a6c79e98acf16d7b6013f9c260b3c518b

  • /product/app/TrichromeLibrary/TrichromeLibrary.apk
    MD5

    39528daeaf7245ec0be5c52098c44a95

    SHA1

    e10152848a684f53e9dc35c38d99ff0add509227

    SHA256

    4d59ccc291c4f9a6170a14baa457d50111354c8ee389043b6b40b08092da835b

    SHA512

    fa5ea98f323a05d2da2934021cd42f3791cb9c11a391ff0d026bf66a1af48f008c465f8eaa1580949c125cb758b16f47efece125919bda440876dbb843dc3e09

  • /product/app/TrichromeLibrary/TrichromeLibrary.apk
    MD5

    39528daeaf7245ec0be5c52098c44a95

    SHA1

    e10152848a684f53e9dc35c38d99ff0add509227

    SHA256

    4d59ccc291c4f9a6170a14baa457d50111354c8ee389043b6b40b08092da835b

    SHA512

    fa5ea98f323a05d2da2934021cd42f3791cb9c11a391ff0d026bf66a1af48f008c465f8eaa1580949c125cb758b16f47efece125919bda440876dbb843dc3e09