52193b90058911302dd3763eb68c59c4f9b818aaab0b7c38a31a0f305a93552b

Analysis

max time kernel
263497s
max time network
54s
platform
android_x64
resource
android-x64
submitted
04-08-2021 05:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Download(1).apk
Size

2.0MB
MD5

896114639cc1c4a141bc58dd4ed2c7df
SHA1

2e41a07fa0ef4b44b3d494846481fef2efe0e5c1
SHA256

52193b90058911302dd3763eb68c59c4f9b818aaab0b7c38a31a0f305a93552b
SHA512

758f60f2a8def6c395f8e92c6e2d39027df7d6c7ad334c573a71519ccb3ce352acc98ea9adc46723de9c6327ebff5f475f52d2a16774be10b1309ad711204d68

Score

7^/10

obfuscation

Malware Config

Signatures

Loads dropped Dex/Jar 3 IoCs

Runs executable file dropped to the device during analysis.

Processes:

jsn.naturephotoframe

ioc	pid	process
/data/user/0/jsn.naturephotoframe/files/498bdbf2.dex	3696	jsn.naturephotoframe
/product/app/webview/webview.apk	3696	jsn.naturephotoframe
/product/app/webview/webview.apk	3696	jsn.naturephotoframe

Uses reflection 4 IoCs

obfuscation

Processes:

jsn.naturephotoframe

description	pid	process
Invokes method dalvik.system.CloseGuard.get	3696	jsn.naturephotoframe
Invokes method dalvik.system.CloseGuard.open	3696	jsn.naturephotoframe
Invokes method android.security.NetworkSecurityPolicy.getInstance	3696	jsn.naturephotoframe
Invokes method android.security.NetworkSecurityPolicy.isCleartextTrafficPermitted	3696	jsn.naturephotoframe

jsn.naturephotoframe
1⤵
- Loads dropped Dex/Jar
- Uses reflection
PID:3696

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/jsn.naturephotoframe/app_webview/.org.chromium.Chromium.Dy7Su8

MD5
afdac49def647dbd9a6bb796cb6ab39f

SHA1
d7a993bea4daa393bb865397c5be7be88a9be576

SHA256
79bcf7681bf5ceb8069a7383edd1b26eccbc8f120ffdb9c203c1572cd87746ad

SHA512
49561ebd2c8a189886b9200a30df8231fbcd0048b99d7fb4c818d1f2feb12e45d313900147dc79ae257688ad6c1d214861f90af2ab7265e3a85d4d120352a427

Download Submit
/data/user/0/jsn.naturephotoframe/app_webview/Web Data

MD5
dfea4f9a562d22c658ec695eca31ea04

SHA1
2e48be6baf86078d93f14fc38fe9f395c1c54261

SHA256
a01b4f35e09bbcdf9753512d4d3ac0b82c8e2f09e2176fa4a5c2523909795b2b

SHA512
8e0aab3c5f29a8737b4713b4a1622aa71b3574feabfb41a098f1326b80472c3fea053e759036c44df71aee1a8a1e9caf93f17a9eec88ab278062d7ed48907789

Download Submit
/data/user/0/jsn.naturephotoframe/app_webview/Web Data-journal

MD5
116daf18c4f17fc4e57227dee57ad167

SHA1
d1d9fd5281ecf3234fc7bd2a55e82b74c5bf9ff3

SHA256
4cb826536946ee38ca8dc86c9e23adb3313c0d9daf02e5a7ddd20d0e1564f8f2

SHA512
fa6262c263795a0f7354a46c490ce887a5b39fbb3b3d9f3e492e21c49b879a97d3946dde9c9eee20e7071c6102de3454c5b6d2550c159877fbfb7547ca428147

Download Submit
/data/user/0/jsn.naturephotoframe/app_webview/metrics_guid

MD5
6018fea49c5325524ce228c443731fa2

SHA1
1754cf9893c32f6987ff22dbe71668afdb6943a7

SHA256
e2c71bc290e67b1c0517b8d71c2feb3e74b6f852b1c16151a7eb2391f87b950f

SHA512
5e2e56f942df1077a172cffbceff4fd2c94bb58956709b5e333ade00ba625746e6d8fa1499b254b4018794de31e583e5682e8ec5a484cc8b4a3e8d2c25917e3d

Download Submit
/data/user/0/jsn.naturephotoframe/app_webview/metrics_guid

MD5
6018fea49c5325524ce228c443731fa2

SHA1
1754cf9893c32f6987ff22dbe71668afdb6943a7

SHA256
e2c71bc290e67b1c0517b8d71c2feb3e74b6f852b1c16151a7eb2391f87b950f

SHA512
5e2e56f942df1077a172cffbceff4fd2c94bb58956709b5e333ade00ba625746e6d8fa1499b254b4018794de31e583e5682e8ec5a484cc8b4a3e8d2c25917e3d

Download Submit
/data/user/0/jsn.naturephotoframe/app_webview/variations_seed_new

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/jsn.naturephotoframe/app_webview/variations_stamp

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/jsn.naturephotoframe/app_webview/webview_data.lock

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/jsn.naturephotoframe/cache/WebView/Crashpad/settings.dat

MD5
48e224d2e8513d49055bc3898f185c16

SHA1
73f7bf06d26a47a61d54eab7c34767795ad54f19

SHA256
63fd61dce5ea002e30c4c67c9bd281a16709c08acbce7e270aa2811e8ba788ed

SHA512
c42b3afce608270dd91e1d0309f7a74ce6ca3b055763f041655cbb52a42f40536f7f6e410c79c037824f52cbe534304d4afc3bf5b4ae05797e1a5026cc6c40cb

Download Submit
/data/user/0/jsn.naturephotoframe/cache/org.chromium.android_webview/Code Cache/js/index

MD5
54cb446f628b2ea4a5bce5769910512e

SHA1
c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

SHA256
fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

SHA512
8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

Download Submit
/data/user/0/jsn.naturephotoframe/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/jsn.naturephotoframe/files/498bdbf2.dex

MD5
022e62b9d5b891ada38ba51113b28e9a

SHA1
06c894a59c15b6926342e26e782de75efa9f5144

SHA256
750949ac8e4623b55d5b94ec4dade89b0baecb3540d82524582d7ad04d29378d

SHA512
235b8ab8c953e274e9f1c30c49ea5a42152c549daf60290cf0f856f1e884d657490545fb703cc7945ae8438141c5e2f821e80196f4ad258e28c747bb8f3e9830

Download Submit
/data/user/0/jsn.naturephotoframe/files/498bdbf2.dex

MD5
4021ca384efb8d7a690e5ba7aa1e4f47

SHA1
30ebc6aa45b8140dc41fde53fe8cd11d3d9dfc41

SHA256
b9d39323c178215de60affa8ccce9fe6e4df214691c057ff32cdef8691819691

SHA512
4ce11acd3b4f27647e291804c0b51d362752e475169ce331bf74604d88f3df8fdbf9696f9e31259af8ff6d1136d461e2c990fbcfb755f47ad7e99ab3ef9bc209

Download Submit
/data/user/0/jsn.naturephotoframe/files/BGEaUZrY

MD5
a1e173483a4ff8610b827df686e78a09

SHA1
421010ee40c5eccf5c29c970f7c75c82750b15e2

SHA256
e9ec2249fd279d92ed18795f41661792ae2cd1b89c1d88a99d9c1f19c2fd57a4

SHA512
a1d8fc0c4a8acfd6bfa757200476036d42084aff3161ba99ff9a86db792465ecf1f50679e4f01c26fe46ac6591cb95fc887d1c41f49d21c8894be54e1fe0e467

Download Submit
/data/user/0/jsn.naturephotoframe/files/TrPJFdsN

MD5
2f8dc2b7911c93666d12b508a0e984a6

SHA1
d22992580528296a5b31294fe8edd5040a3a4131

SHA256
9b1c0506debeb21e8151202a25c3d53ee0a099afed0ef7b74491b26e06acf678

SHA512
b5e1406261656b8368bc32fd412793c5d9b7f0bd12218234cc09969b825c716451c2f053367cf533a41279737f6b0e81bb45cd4c984d3027323f56f496e2639e

Download Submit
/data/user/0/jsn.naturephotoframe/no_backup/com.google.InstanceId.properties

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/jsn.naturephotoframe/no_backup/com.google.android.gms.appid-no-backup

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/jsn.naturephotoframe/shared_prefs/WebViewChromiumPrefs.xml

MD5
1357a1d7af06755d561a7ed916373baf

SHA1
4a0a0d8b4b81bba92924dd7cf53a44d438312729

SHA256
647f3960ac648b24a8d9fa17f93f625437bd6f385636c56f10fefdd9cd447597

SHA512
61f15a595e21cb7cbf0b1a5268da72b39ce767e43195b4b1a607125e6e1d3237aa382cffbeb122bee9111f01a61ed4aebc2bef6fa646891f43154b01c32d05d4

Download Submit
/data/user/0/jsn.naturephotoframe/shared_prefs/com.google.android.gms.appid.xml

MD5
a931414b2add7a43af500607a6c20dea

SHA1
e386dbe814e94cb8cfdef445f3d97b6359a63c31

SHA256
7a7c257ef6b51f0beaa111b9df8a6c87686c5554545fb58d3556c959d960f17d

SHA512
384c097a107e531acfafdeced64a600c5eada24ac9d252261cf275a62b381eee4406136cb8c6427c55f35e8985bd66b6ec58020d82f68ca26110409b3f70bf5c

Download Submit
/data/user/0/jsn.naturephotoframe/shared_prefs/jsn.naturephotoframe_preferences.xml

MD5
e4b35984ade5e9f278f846becaf2e7cc

SHA1
15a4350985bfe6f9a4cda560764719888bb6e7a2

SHA256
43fb25bb66e2eac907cd68e01673b1e34a9ece960bf6b4eaf8510d0fdd68418b

SHA512
3e39fcfdd20c908dbbbbd4c58eb1b8d8df98293482c2e66f63e7eb63a7a92888b3d2fa2a2f89fdf22fffcff4344aea9686e7aaed75b60153b78d19b9e7f8d0b5

Download Submit
/data/user/0/jsn.naturephotoframe/shared_prefs/jsn.naturephotoframe_preferences.xml

MD5
d8674d8764137476584c303005bd71da

SHA1
e940e950455f2b8e725edad75da871fbfe9b4457

SHA256
fbfcd004edb260a8d24774a437892d43da95fcafc9a8266af1e5a9111fa8164f

SHA512
723faa5e270121f636b46f88b60aea204daa49bdd66f7d28022cb2ea2859f7325b79d8f8ebf044ac6152b4de26566ae62b1b5da3e056eec35f9e4ee491a9dafe

Download Submit
/product/app/webview/webview.apk

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/product/app/webview/webview.apk

MD5
40e61bace188b6603d53fc3d8916a3f8

SHA1
74f7fd19aedc55977c79fa40230977ce4827cb03

SHA256
6ede39de8efb9d2f0a2c467f4c9e303b03236e9c6917fb4d6fa2ef3b5d15090e

SHA512
12f8424d5616774cf98c4955f9bd80e9967cc944d1ffee1a4cd6ec6f4e4fbf402030c58dde9480057c3d7e3c6805c6edccf77825a024dc87841783a5644b68af

Download Submit