Analysis

  • max time kernel
    263497s
  • max time network
    54s
  • platform
    android_x64
  • resource
    android-x64
  • submitted
    04-08-2021 05:45

General

  • Target

    Download(1).apk

  • Size

    2.0MB

  • MD5

    896114639cc1c4a141bc58dd4ed2c7df

  • SHA1

    2e41a07fa0ef4b44b3d494846481fef2efe0e5c1

  • SHA256

    52193b90058911302dd3763eb68c59c4f9b818aaab0b7c38a31a0f305a93552b

  • SHA512

    758f60f2a8def6c395f8e92c6e2d39027df7d6c7ad334c573a71519ccb3ce352acc98ea9adc46723de9c6327ebff5f475f52d2a16774be10b1309ad711204d68

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses reflection 4 IoCs

Processes

  • jsn.naturephotoframe
    1⤵
    • Loads dropped Dex/Jar
    • Uses reflection
    PID:3696

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/jsn.naturephotoframe/app_webview/.org.chromium.Chromium.Dy7Su8
    MD5

    afdac49def647dbd9a6bb796cb6ab39f

    SHA1

    d7a993bea4daa393bb865397c5be7be88a9be576

    SHA256

    79bcf7681bf5ceb8069a7383edd1b26eccbc8f120ffdb9c203c1572cd87746ad

    SHA512

    49561ebd2c8a189886b9200a30df8231fbcd0048b99d7fb4c818d1f2feb12e45d313900147dc79ae257688ad6c1d214861f90af2ab7265e3a85d4d120352a427

  • /data/user/0/jsn.naturephotoframe/app_webview/Web Data
    MD5

    dfea4f9a562d22c658ec695eca31ea04

    SHA1

    2e48be6baf86078d93f14fc38fe9f395c1c54261

    SHA256

    a01b4f35e09bbcdf9753512d4d3ac0b82c8e2f09e2176fa4a5c2523909795b2b

    SHA512

    8e0aab3c5f29a8737b4713b4a1622aa71b3574feabfb41a098f1326b80472c3fea053e759036c44df71aee1a8a1e9caf93f17a9eec88ab278062d7ed48907789

  • /data/user/0/jsn.naturephotoframe/app_webview/Web Data-journal
    MD5

    116daf18c4f17fc4e57227dee57ad167

    SHA1

    d1d9fd5281ecf3234fc7bd2a55e82b74c5bf9ff3

    SHA256

    4cb826536946ee38ca8dc86c9e23adb3313c0d9daf02e5a7ddd20d0e1564f8f2

    SHA512

    fa6262c263795a0f7354a46c490ce887a5b39fbb3b3d9f3e492e21c49b879a97d3946dde9c9eee20e7071c6102de3454c5b6d2550c159877fbfb7547ca428147

  • /data/user/0/jsn.naturephotoframe/app_webview/metrics_guid
    MD5

    6018fea49c5325524ce228c443731fa2

    SHA1

    1754cf9893c32f6987ff22dbe71668afdb6943a7

    SHA256

    e2c71bc290e67b1c0517b8d71c2feb3e74b6f852b1c16151a7eb2391f87b950f

    SHA512

    5e2e56f942df1077a172cffbceff4fd2c94bb58956709b5e333ade00ba625746e6d8fa1499b254b4018794de31e583e5682e8ec5a484cc8b4a3e8d2c25917e3d

  • /data/user/0/jsn.naturephotoframe/app_webview/metrics_guid
    MD5

    6018fea49c5325524ce228c443731fa2

    SHA1

    1754cf9893c32f6987ff22dbe71668afdb6943a7

    SHA256

    e2c71bc290e67b1c0517b8d71c2feb3e74b6f852b1c16151a7eb2391f87b950f

    SHA512

    5e2e56f942df1077a172cffbceff4fd2c94bb58956709b5e333ade00ba625746e6d8fa1499b254b4018794de31e583e5682e8ec5a484cc8b4a3e8d2c25917e3d

  • /data/user/0/jsn.naturephotoframe/app_webview/variations_seed_new
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/jsn.naturephotoframe/app_webview/variations_stamp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/jsn.naturephotoframe/app_webview/webview_data.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/jsn.naturephotoframe/cache/WebView/Crashpad/settings.dat
    MD5

    48e224d2e8513d49055bc3898f185c16

    SHA1

    73f7bf06d26a47a61d54eab7c34767795ad54f19

    SHA256

    63fd61dce5ea002e30c4c67c9bd281a16709c08acbce7e270aa2811e8ba788ed

    SHA512

    c42b3afce608270dd91e1d0309f7a74ce6ca3b055763f041655cbb52a42f40536f7f6e410c79c037824f52cbe534304d4afc3bf5b4ae05797e1a5026cc6c40cb

  • /data/user/0/jsn.naturephotoframe/cache/org.chromium.android_webview/Code Cache/js/index
    MD5

    54cb446f628b2ea4a5bce5769910512e

    SHA1

    c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

    SHA256

    fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

    SHA512

    8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

  • /data/user/0/jsn.naturephotoframe/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/jsn.naturephotoframe/files/498bdbf2.dex
    MD5

    022e62b9d5b891ada38ba51113b28e9a

    SHA1

    06c894a59c15b6926342e26e782de75efa9f5144

    SHA256

    750949ac8e4623b55d5b94ec4dade89b0baecb3540d82524582d7ad04d29378d

    SHA512

    235b8ab8c953e274e9f1c30c49ea5a42152c549daf60290cf0f856f1e884d657490545fb703cc7945ae8438141c5e2f821e80196f4ad258e28c747bb8f3e9830

  • /data/user/0/jsn.naturephotoframe/files/498bdbf2.dex
    MD5

    4021ca384efb8d7a690e5ba7aa1e4f47

    SHA1

    30ebc6aa45b8140dc41fde53fe8cd11d3d9dfc41

    SHA256

    b9d39323c178215de60affa8ccce9fe6e4df214691c057ff32cdef8691819691

    SHA512

    4ce11acd3b4f27647e291804c0b51d362752e475169ce331bf74604d88f3df8fdbf9696f9e31259af8ff6d1136d461e2c990fbcfb755f47ad7e99ab3ef9bc209

  • /data/user/0/jsn.naturephotoframe/files/BGEaUZrY
    MD5

    a1e173483a4ff8610b827df686e78a09

    SHA1

    421010ee40c5eccf5c29c970f7c75c82750b15e2

    SHA256

    e9ec2249fd279d92ed18795f41661792ae2cd1b89c1d88a99d9c1f19c2fd57a4

    SHA512

    a1d8fc0c4a8acfd6bfa757200476036d42084aff3161ba99ff9a86db792465ecf1f50679e4f01c26fe46ac6591cb95fc887d1c41f49d21c8894be54e1fe0e467

  • /data/user/0/jsn.naturephotoframe/files/TrPJFdsN
    MD5

    2f8dc2b7911c93666d12b508a0e984a6

    SHA1

    d22992580528296a5b31294fe8edd5040a3a4131

    SHA256

    9b1c0506debeb21e8151202a25c3d53ee0a099afed0ef7b74491b26e06acf678

    SHA512

    b5e1406261656b8368bc32fd412793c5d9b7f0bd12218234cc09969b825c716451c2f053367cf533a41279737f6b0e81bb45cd4c984d3027323f56f496e2639e

  • /data/user/0/jsn.naturephotoframe/no_backup/com.google.InstanceId.properties
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/jsn.naturephotoframe/no_backup/com.google.android.gms.appid-no-backup
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/jsn.naturephotoframe/shared_prefs/WebViewChromiumPrefs.xml
    MD5

    1357a1d7af06755d561a7ed916373baf

    SHA1

    4a0a0d8b4b81bba92924dd7cf53a44d438312729

    SHA256

    647f3960ac648b24a8d9fa17f93f625437bd6f385636c56f10fefdd9cd447597

    SHA512

    61f15a595e21cb7cbf0b1a5268da72b39ce767e43195b4b1a607125e6e1d3237aa382cffbeb122bee9111f01a61ed4aebc2bef6fa646891f43154b01c32d05d4

  • /data/user/0/jsn.naturephotoframe/shared_prefs/com.google.android.gms.appid.xml
    MD5

    a931414b2add7a43af500607a6c20dea

    SHA1

    e386dbe814e94cb8cfdef445f3d97b6359a63c31

    SHA256

    7a7c257ef6b51f0beaa111b9df8a6c87686c5554545fb58d3556c959d960f17d

    SHA512

    384c097a107e531acfafdeced64a600c5eada24ac9d252261cf275a62b381eee4406136cb8c6427c55f35e8985bd66b6ec58020d82f68ca26110409b3f70bf5c

  • /data/user/0/jsn.naturephotoframe/shared_prefs/jsn.naturephotoframe_preferences.xml
    MD5

    e4b35984ade5e9f278f846becaf2e7cc

    SHA1

    15a4350985bfe6f9a4cda560764719888bb6e7a2

    SHA256

    43fb25bb66e2eac907cd68e01673b1e34a9ece960bf6b4eaf8510d0fdd68418b

    SHA512

    3e39fcfdd20c908dbbbbd4c58eb1b8d8df98293482c2e66f63e7eb63a7a92888b3d2fa2a2f89fdf22fffcff4344aea9686e7aaed75b60153b78d19b9e7f8d0b5

  • /data/user/0/jsn.naturephotoframe/shared_prefs/jsn.naturephotoframe_preferences.xml
    MD5

    d8674d8764137476584c303005bd71da

    SHA1

    e940e950455f2b8e725edad75da871fbfe9b4457

    SHA256

    fbfcd004edb260a8d24774a437892d43da95fcafc9a8266af1e5a9111fa8164f

    SHA512

    723faa5e270121f636b46f88b60aea204daa49bdd66f7d28022cb2ea2859f7325b79d8f8ebf044ac6152b4de26566ae62b1b5da3e056eec35f9e4ee491a9dafe

  • /product/app/webview/webview.apk
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /product/app/webview/webview.apk
    MD5

    40e61bace188b6603d53fc3d8916a3f8

    SHA1

    74f7fd19aedc55977c79fa40230977ce4827cb03

    SHA256

    6ede39de8efb9d2f0a2c467f4c9e303b03236e9c6917fb4d6fa2ef3b5d15090e

    SHA512

    12f8424d5616774cf98c4955f9bd80e9967cc944d1ffee1a4cd6ec6f4e4fbf402030c58dde9480057c3d7e3c6805c6edccf77825a024dc87841783a5644b68af