Analysis
-
max time kernel
264830s -
platform
android_x86 -
resource
android-x86-arm -
submitted
04-08-2021 06:07
Static task
static1
Behavioral task
behavioral1
Sample
Download(2).apk
Resource
android-x86-arm
Behavioral task
behavioral2
Sample
Download(2).apk
Resource
android-x64-arm64
Behavioral task
behavioral3
Sample
Download(2).apk
Resource
android-x64
General
-
Target
Download(2).apk
-
Size
2.0MB
-
MD5
fda59dd3baf55fac67d6123ea64d29e8
-
SHA1
88ee2246f6e7790179a152b6e95ba55a3fa4cdac
-
SHA256
319d3a10c72d81ac09dc525199966586a211f0b10405f9e7957e40adf1d65bcb
-
SHA512
d7951206533b0af93cbd1e0c1b502d37a6df0639ee6b7430a2bbc4522f25b5cb8ffeace104b1db06ddb9a403cb6b0fb45d396bee88b9b20f4e2ffca8e7c0c7f0
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
Processes:
/system/bin/dex2oatcom.pix.art.TSRioc pid process /data/user/0/com.pix.art.TSR/files/c73172c6.dex 4896 /system/bin/dex2oat /data/user/0/com.pix.art.TSR/files/c73172c6.dex 4856 com.pix.art.TSR -
Uses reflection 4 IoCs
Processes:
com.pix.art.TSRdescription pid process Invokes method dalvik.system.CloseGuard.get 4856 com.pix.art.TSR Invokes method dalvik.system.CloseGuard.open 4856 com.pix.art.TSR Invokes method dalvik.system.CloseGuard.get 4856 com.pix.art.TSR Invokes method dalvik.system.CloseGuard.open 4856 com.pix.art.TSR
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.pix.art.TSR/app_webview/Web DataMD5
5168d8c4556ac22decc2362ce61ddafb
SHA1664cb3c7b0b5b13c3b915c28354793bcc0afd408
SHA2565057cf5dab27589d93f7d55ffa505ea8249c213b79fd8c85ac39423c135c5db6
SHA51281cefa22b3b1d30acf590b44b97a47b68c265a15b3725ff348ac0256faae0aa76b6a9bedece897c912bbcc86623c3a20c193ff131d9a25d0ee8e315394ae332d
-
/data/user/0/com.pix.art.TSR/app_webview/Web Data-journalMD5
8f8fd4b93e13740502b875b4dfd034be
SHA1a80e401519e102879a142eadd61fefb9dd6ec419
SHA2567149e465c665f047fd8423f92506bdf54d852215600815e321635d60ec03dfa4
SHA512f71616e2262369bd00208c4de3fe6b7364be222e79a50b397cc1073dde336acf99feeacd30394a092b7d3536c484b3fa10a218b5e1815a24059746728725795d
-
/data/user/0/com.pix.art.TSR/app_webview/metrics_guidMD5
52bb0143934f8d26af0818ed3a007f04
SHA14994bae9cf314bb48c644aa5442f6ad977cdd0b3
SHA256c7645449e4648c59a23acc1c40b42f7a2475b843d7d15e3a6dd9282b15252744
SHA5129f77d0a5ec78cafaa00ab3d69d9309ec6564d68b1afd9e72f3e2ebb135b5e16db9b713747d4ea2878e8955269de246c494fe81cb84ac5d0c919aea5887509b98
-
/data/user/0/com.pix.art.TSR/app_webview/metrics_guidMD5
52bb0143934f8d26af0818ed3a007f04
SHA14994bae9cf314bb48c644aa5442f6ad977cdd0b3
SHA256c7645449e4648c59a23acc1c40b42f7a2475b843d7d15e3a6dd9282b15252744
SHA5129f77d0a5ec78cafaa00ab3d69d9309ec6564d68b1afd9e72f3e2ebb135b5e16db9b713747d4ea2878e8955269de246c494fe81cb84ac5d0c919aea5887509b98
-
/data/user/0/com.pix.art.TSR/app_webview/variations_seed_newMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/app_webview/variations_stampMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/app_webview/webview_data.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/files/BGEaUZrYMD5
27ba19805d52e788ce7ee21d6f82137c
SHA136bd2c6b725254b966fb8fef828b4f6f9e41d283
SHA256c4fb4c4feb09b15b40b6334bccfac10657db63fc94b0043b35cc7173b43993bd
SHA512c35fe911c13605de5441b5829a925e433bdd8b64c4d076562b07c8d3d6f2ed8bd72273fa7eecb17b946d4ef2584d550d4ac67871822b986f7529c014b0def34c
-
/data/user/0/com.pix.art.TSR/files/TrPJFdsNMD5
27ba19805d52e788ce7ee21d6f82137c
SHA136bd2c6b725254b966fb8fef828b4f6f9e41d283
SHA256c4fb4c4feb09b15b40b6334bccfac10657db63fc94b0043b35cc7173b43993bd
SHA512c35fe911c13605de5441b5829a925e433bdd8b64c4d076562b07c8d3d6f2ed8bd72273fa7eecb17b946d4ef2584d550d4ac67871822b986f7529c014b0def34c
-
/data/user/0/com.pix.art.TSR/files/c73172c6.dexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/files/c73172c6.dexMD5
4e82fcdfc73af6e0a752cbb0325a58a5
SHA1b8706165672ef1b8abcb16186aaf4a0e25d8f631
SHA256f066ed6e6ecf2d8b35fe8c2a6f0e97cb4098f9e9340a0bdf0bd4db3edb45ce08
SHA512b5a54d0d7e5e89f3edcf09d1fe3c703ace8d0f87f075d246d3b924bd8cb408fce48c98ca9d6a7bc544527976ba6b53e4848f3a17b2382b957fd0668158fa04d6
-
/data/user/0/com.pix.art.TSR/files/c73172c6.dexMD5
2db197a690dc887c4c11213214217bdb
SHA1243a8e2cf3d74398d50b92df3cbbaaa42c142085
SHA25653ca7329b1ba129c5c99e607ea51365814dbcb88e91892483c3ee80546a59ff6
SHA512493006ef8f9f51f05d625f0796271d03d8f40bb171f6909cc021216a3ba11e3a6fc2394503af7a2253b9a61a5f419c7f5eab2baf0fa9e9766564af46bdbf6b4b
-
/data/user/0/com.pix.art.TSR/files/c73172c6.dex.x86.flockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/files/oat/x86/c73172c6.odexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/files/oat/x86/c73172c6.vdexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/no_backup/com.google.InstanceId.propertiesMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/no_backup/com.google.android.gms.appid-no-backupMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/shared_prefs/WebViewChromiumPrefs.xmlMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/shared_prefs/com.google.android.gms.appid.xmlMD5
eb8b8d78e09555aac07b70ea70ce2c73
SHA14ca3d52be3606796f502c4f59fcfffcb7c3d7a9e
SHA256bea3ca3dc907c99eaa3bcfd89190cb31330c3dc00741a910402507e86da1b51e
SHA5126f4600d9001329532fb06b38ed4327fda3b08e27b3d0e27573ecb91343ad00d2157026a4806d95e3613fb1c4cbfa0bb70f7614d5651127970cdf6e41cd0ce58a
-
/data/user/0/com.pix.art.TSR/shared_prefs/com.pix.art.TSR_preferences.xmlMD5
45886698ca3b1e0bc7aa65749a3caef6
SHA1f2335f072066043ddc2779dc1152f363b8ff20ea
SHA2567bd1659d808858715613154f8c3abf98d0de6080ae9afa00e30a59ed66514375
SHA512c712665f9d1151e3344d34aa7c1989767009ddc7ce327d050b065a4699d8a395999a2206366cdaa464f851360182009a0fa67d48dea65fbc4c0c5c11fd21a22f
-
/data/user/0/com.pix.art.TSR/shared_prefs/com.pix.art.TSR_preferences.xmlMD5
a4443a0b916b2e2a7565d07d020675a5
SHA18699a8e594ebfc765091510f3b7315c297390cfa
SHA256b46515180f622e4f9fd180cbb5906d3b79642a09321c18cf556107208f114dae
SHA5125618e44f17aaccfff3811003513c5aeeed4fef2439a8598b530e8f952b26259b3a38ec4513e1468541ea1727a0fd3d062dbad7ebe97f659ea051c0631b9edc47