Analysis
-
max time kernel
277613s -
max time network
87s -
platform
android_x64 -
resource
android-x64 -
submitted
04-08-2021 09:40
Static task
static1
Behavioral task
behavioral1
Sample
Download.apk
Resource
android-x86-arm
Behavioral task
behavioral2
Sample
Download.apk
Resource
android-x64-arm64
Behavioral task
behavioral3
Sample
Download.apk
Resource
android-x64
General
-
Target
Download.apk
-
Size
2.0MB
-
MD5
98be798cc5f3e4ccb3a92cc24c9bab79
-
SHA1
e813dc8498fe8a115b5d023878bbad48f6206108
-
SHA256
22c4c4a858675eded06684667cb7d325477af8a3dde8f55c10e765cfd65ea797
-
SHA512
3841dbe18c81262f5679684cb854bffd49107dc44d35d3fa16f506fb6fc1a231c818f1eff1a90e12ecaf156eb37b9479e8a1080d6e8e72fa8c0fe7d0e022a47a
Malware Config
Signatures
-
Loads dropped Dex/Jar 3 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.pix.art.TSRioc pid process /data/user/0/com.pix.art.TSR/files/c73172c6.dex 3641 com.pix.art.TSR /product/app/webview/webview.apk 3641 com.pix.art.TSR /product/app/webview/webview.apk 3641 com.pix.art.TSR -
Uses reflection 4 IoCs
Processes:
com.pix.art.TSRdescription pid process Invokes method dalvik.system.CloseGuard.get 3641 com.pix.art.TSR Invokes method dalvik.system.CloseGuard.open 3641 com.pix.art.TSR Invokes method android.security.NetworkSecurityPolicy.getInstance 3641 com.pix.art.TSR Invokes method android.security.NetworkSecurityPolicy.isCleartextTrafficPermitted 3641 com.pix.art.TSR
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.pix.art.TSR/app_webview/.org.chromium.Chromium.kgbCQUMD5
cbaac8f8077e5e3e9f766a6dd795c45f
SHA13395781f79185d3ecbcd5f1f72c2bc176c24a382
SHA256af2d6a6992259c65fb417414bef467982c8ff8cb1337263c9c7520d96bedc84b
SHA5127668947e378137319f5704743bab165b31a19ec3fa7635578a64b40ecff53948998315eb8cc01ac7a215447d872a132ad1f6f1a0199c706263894f200aad842c
-
/data/user/0/com.pix.art.TSR/app_webview/Web DataMD5
dfea4f9a562d22c658ec695eca31ea04
SHA12e48be6baf86078d93f14fc38fe9f395c1c54261
SHA256a01b4f35e09bbcdf9753512d4d3ac0b82c8e2f09e2176fa4a5c2523909795b2b
SHA5128e0aab3c5f29a8737b4713b4a1622aa71b3574feabfb41a098f1326b80472c3fea053e759036c44df71aee1a8a1e9caf93f17a9eec88ab278062d7ed48907789
-
/data/user/0/com.pix.art.TSR/app_webview/Web Data-journalMD5
0465b2a6fb09078eac337da2221e2713
SHA1d6e70f4a230334c2d872e9f54441dc63ab15511d
SHA25600e3b8638cca3365d6cf7f0a68cd5db41160cda4cd4c110a368e09e00bfd8e1d
SHA512fb27a3c5d7901163f2e89f947c315ce7501ecce6e65f5672a00b677cca1f604d52dd460fbc45559a55fd6efb028e5d58b3b463368bd0d3c231552d7998f1c2c9
-
/data/user/0/com.pix.art.TSR/app_webview/metrics_guidMD5
486c1f12ba0a81a837cfedc6eeb7cf7f
SHA14fbe518292fcb784871055f929577b9388f2e09f
SHA2567919028828211cd23b782e6ce0e7b4ac285141d4b319a41fa6da210ca49950f9
SHA512e1a92204fad4de8d14e7cdc8b0f7140edaa9517fcb56c1bd709c4a0e3d27b4d7c70ce135e87bae50ce480acb92118f590f5628d7b62dacf22db09c58bbb88042
-
/data/user/0/com.pix.art.TSR/app_webview/metrics_guidMD5
486c1f12ba0a81a837cfedc6eeb7cf7f
SHA14fbe518292fcb784871055f929577b9388f2e09f
SHA2567919028828211cd23b782e6ce0e7b4ac285141d4b319a41fa6da210ca49950f9
SHA512e1a92204fad4de8d14e7cdc8b0f7140edaa9517fcb56c1bd709c4a0e3d27b4d7c70ce135e87bae50ce480acb92118f590f5628d7b62dacf22db09c58bbb88042
-
/data/user/0/com.pix.art.TSR/app_webview/variations_seed_newMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/app_webview/variations_stampMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/app_webview/webview_data.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/cache/WebView/Crashpad/settings.datMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/cache/org.chromium.android_webview/Code Cache/js/indexMD5
54cb446f628b2ea4a5bce5769910512e
SHA1c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA5128f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
-
/data/user/0/com.pix.art.TSR/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-indexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/files/BGEaUZrYMD5
076d721b7956bd47d8b5b539f61db5bf
SHA17fc93b03a2bce7cff9092bbf3a551e1166c241c5
SHA256f55579fea55b16ca24df73dc3cb583f9556c65d820a6b9910d9e4706129c831b
SHA51280420d9193b1c7781072be188e3908b9727885f6fb38d93bd5d85c5618e0d62b4d6de5ec02c193e5a927e445644b96536763390c06fb23ed7615c592aaec0423
-
/data/user/0/com.pix.art.TSR/files/TrPJFdsNMD5
2966c5a0262273944458987635989fa6
SHA1a46a3abfcbf30d04a1006833e0e2836dfc9834f3
SHA25633b51f6605283c41ef761e0fa4ad061500de3c1847f79623b5e3db346da05f1d
SHA512eee683d230ec30fc6e4608e871358e91c06632ea79177ac7f1b07b0b72b2d7dfc1de2fbd05e6cc4baff2949d936ff698343c75c0cfba51c6ec33f1365028b6a6
-
/data/user/0/com.pix.art.TSR/files/c73172c6.dexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/files/c73172c6.dexMD5
5053f8f01d0b46e8056b427b7826c242
SHA1074898e13ecc0f7ced125f4150ded49f44efd0de
SHA2561716679f5f8acffdf90d090d5b967642a3ebab1f895cd029e91873063f19ba68
SHA5129edbece1b43373043430dc975b9a3d87562d657a3f2581a4628d7b0cb2891a7241b10f3dcbed20099aa47eed1e5880ad7b92a4ef60f240afa53c755e39d58241
-
/data/user/0/com.pix.art.TSR/no_backup/com.google.InstanceId.propertiesMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/no_backup/com.google.android.gms.appid-no-backupMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/shared_prefs/WebViewChromiumPrefs.xmlMD5
1357a1d7af06755d561a7ed916373baf
SHA14a0a0d8b4b81bba92924dd7cf53a44d438312729
SHA256647f3960ac648b24a8d9fa17f93f625437bd6f385636c56f10fefdd9cd447597
SHA51261f15a595e21cb7cbf0b1a5268da72b39ce767e43195b4b1a607125e6e1d3237aa382cffbeb122bee9111f01a61ed4aebc2bef6fa646891f43154b01c32d05d4
-
/data/user/0/com.pix.art.TSR/shared_prefs/com.google.android.gms.appid.xmlMD5
472a1cb4c982d9807d5708af4b4ba804
SHA132207c96af7627dc71f833c163b15cc39aaa2a59
SHA2567a2a0d86e3bc6905753668e475f51dbb226479c5301de0ebf54e87b210e89968
SHA512bff02c83e43acfcf9c8787394ddc8ce427f196d64608f98d94f025c088f3c4847f69652449bdd1b6b78a72a416fca450e0cd0940013a5ccf29a2863adcb12cc9
-
/data/user/0/com.pix.art.TSR/shared_prefs/com.pix.art.TSR_preferences.xmlMD5
f7cd33527c1702d954e9b4406a7ecafb
SHA18295e7484d51f98f040d6ab89514baeb73605406
SHA25697741959ab0388c7da39a07a8e1daaaa1e6e1e0de85269db44ec7d222c884719
SHA512344996cd09b96baa6455bbdc15fc0ffa7934b3195bb73c798c1cc7fc0e59f8c3c28ec25bb8a63ce23d514fe9c1309e24178696e391c0a00d2a4d82fbec120d8e
-
/data/user/0/com.pix.art.TSR/shared_prefs/com.pix.art.TSR_preferences.xmlMD5
0003a2dd8c85c0d50566609f37a9da49
SHA18814b9d3854f79e1dc66a10c7e6d393d7b56c0ca
SHA2562fde178e1aa35512ac35da0f04938e83a5e5625c9f52d8dcfdbf6a9d67deb7bb
SHA512b0a9650ee0d0476a74c9c876eafc74d0c1cc544f06da404f757826728bdebe1d4f7ecf5b38980b869fba707a6cc28b8fa754fb311565f2e2f90bfc6f331f0e7e
-
/product/app/webview/webview.apkMD5
40e61bace188b6603d53fc3d8916a3f8
SHA174f7fd19aedc55977c79fa40230977ce4827cb03
SHA2566ede39de8efb9d2f0a2c467f4c9e303b03236e9c6917fb4d6fa2ef3b5d15090e
SHA51212f8424d5616774cf98c4955f9bd80e9967cc944d1ffee1a4cd6ec6f4e4fbf402030c58dde9480057c3d7e3c6805c6edccf77825a024dc87841783a5644b68af
-
/product/app/webview/webview.apkMD5
40e61bace188b6603d53fc3d8916a3f8
SHA174f7fd19aedc55977c79fa40230977ce4827cb03
SHA2566ede39de8efb9d2f0a2c467f4c9e303b03236e9c6917fb4d6fa2ef3b5d15090e
SHA51212f8424d5616774cf98c4955f9bd80e9967cc944d1ffee1a4cd6ec6f4e4fbf402030c58dde9480057c3d7e3c6805c6edccf77825a024dc87841783a5644b68af