Analysis

  • max time kernel
    264832s
  • max time network
    139s
  • platform
    android_x64
  • resource
    android-x64-arm64
  • submitted
    04-08-2021 06:07

General

  • Target

    Download(2).apk

  • Size

    2.0MB

  • MD5

    fda59dd3baf55fac67d6123ea64d29e8

  • SHA1

    88ee2246f6e7790179a152b6e95ba55a3fa4cdac

  • SHA256

    319d3a10c72d81ac09dc525199966586a211f0b10405f9e7957e40adf1d65bcb

  • SHA512

    d7951206533b0af93cbd1e0c1b502d37a6df0639ee6b7430a2bbc4522f25b5cb8ffeace104b1db06ddb9a403cb6b0fb45d396bee88b9b20f4e2ffca8e7c0c7f0

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses reflection 5 IoCs

Processes

  • com.pix.art.TSR
    1⤵
    • Loads dropped Dex/Jar
    • Uses reflection
    PID:4271

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.pix.art.TSR/app_webview/.com.google.Chrome.JLRv0j
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.pix.art.TSR/app_webview/Default/Web Data
    MD5

    536e58581641e767a8bf8eca3b8cde9e

    SHA1

    750a88189322e36147068f1c585f02163ff3a388

    SHA256

    3ba04fa6622801be4e625176b175ff75caf19c8966c13418bf1433433eefa1a0

    SHA512

    498da0911c702bc683cf153ce9b66044642378eafb79bffe0afd7f7460bd12a4c9bb424e1606550d8bbfb25dede34b5ad6ad1f7ee698c8d5ff67208625612319

  • /data/user/0/com.pix.art.TSR/app_webview/Default/Web Data-journal
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.pix.art.TSR/app_webview/variations_seed_new
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.pix.art.TSR/app_webview/variations_stamp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.pix.art.TSR/app_webview/webview_data.lock
    MD5

    85a4fcf9856a35d3956f969c080c69e3

    SHA1

    fcb9d5e0dc6452994898dcac18ae79ea0e437e24

    SHA256

    7c7f85eebe35cdb1b02c6f3cdb64aba12ef2d37937dcdc42cc3c3ce1f70557c5

    SHA512

    ca77f3a3553d0872f3c269bff4bdab37502fa4eb4352a55387d1b51d3941a7a25cc0ef8b466bcebeef8725fa241e620fcab338bdc569cb655b8248812c184f9a

  • /data/user/0/com.pix.art.TSR/cache/WebView/Crashpad/settings.dat
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.pix.art.TSR/cache/WebView/Default/HTTP Cache/Code Cache/js/index
    MD5

    54cb446f628b2ea4a5bce5769910512e

    SHA1

    c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

    SHA256

    fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

    SHA512

    8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

  • /data/user/0/com.pix.art.TSR/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.pix.art.TSR/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
    MD5

    54cb446f628b2ea4a5bce5769910512e

    SHA1

    c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

    SHA256

    fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

    SHA512

    8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

  • /data/user/0/com.pix.art.TSR/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.pix.art.TSR/cache/WebView/font_unique_name_table.pb
    MD5

    b18833d483828180924a6d4048fca1a0

    SHA1

    d7edde78cc26221c9455a87ca3eca8960b6673a8

    SHA256

    d9c4ea0a7c399884f8a908a33a4d675a64b557b50916e62ab96fa2213e6d4801

    SHA512

    11e6bf7e067884138dcd6908e311321a9eca1e4926323f49736f9dfdebd4b548064beacc356f78e3f32a99769109b154e145ef1162e6a9547aca878f0dd4ee7c

  • /data/user/0/com.pix.art.TSR/files/BGEaUZrY
    MD5

    8ae8f4cf80613a3dbefb1d44f45c6b67

    SHA1

    3d18d1515bca6931c7cd2009557880623aa2ed1c

    SHA256

    cf7835cebc3fba6d2837cc41db0a6fd250559eb542f7a41a5938d79ee7c936ab

    SHA512

    4e3fabc7b92d10198e43a4beecc5ed60e193b5c5cbc52ccd0b2170879cec04ac86e5ec069e16a87460c2fabc7e31c656f3d493bff135a3925d0d98233ae5362e

  • /data/user/0/com.pix.art.TSR/files/TrPJFdsN
    MD5

    e9294c5a3a0fe21bc3c7c55e842cd966

    SHA1

    858dde35f52be3bbe21934a13e1d19611d244203

    SHA256

    109eeb405df66e5228f2b042962b92126326dd3dcabc1c16e82d310984004651

    SHA512

    098d851052a2daba6cac35cf192e6949ccc3a1ecd04d8f1f4f8fb014f83f14b9995134515d718e426f47cfccd273cd6059f11d258105e4ac5f7f0ed0a709424f

  • /data/user/0/com.pix.art.TSR/files/c73172c6.dex
    MD5

    fdca68013efb9db880098e97fabf0a87

    SHA1

    bed03bc753f27366ee4626445afe8f703b0711a2

    SHA256

    a38cf191fd7f66aa9f87ff03fd0efd2114b0305e7de9a204301142b487f158b0

    SHA512

    93f37267182d5b75916f2ca6a2becb5864e93409ef5cb539783a002b03b64ce563121610ad5f14f054fa657b63c93b64f59aee1db93440a8704b4993cfa07bff

  • /data/user/0/com.pix.art.TSR/files/c73172c6.dex
    MD5

    cbf4527f8986c6520e09d0dc2c34283a

    SHA1

    25c1fe4cd2b8d94ab0eec5fa6207fb18326f2f54

    SHA256

    20ffc952666540b23336515f975a10f866dcbe132eff25aa7b98adb0634f314d

    SHA512

    3ae22a0e833829cec8dcc2afa4eb54cd46a123f187a3daf2d12a213d98fd68d422b890315e1c8a1c87c6778f7f64d3cfbd0693aaac53dc8529d5ba7c8918435c

  • /data/user/0/com.pix.art.TSR/no_backup/com.google.InstanceId.properties
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.pix.art.TSR/no_backup/com.google.android.gms.appid-no-backup
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.pix.art.TSR/shared_prefs/WebViewChromiumPrefs.xml
    MD5

    97ccd9a2b2063143df56b6937f961ca4

    SHA1

    5e78a91ae5df289ce83443cb7d5589dd3504fb5d

    SHA256

    248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

    SHA512

    86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

  • /data/user/0/com.pix.art.TSR/shared_prefs/com.google.android.gms.appid.xml
    MD5

    3dad0da8171d4091d99c4609093eb65e

    SHA1

    7f5fc457acea563cc72961f43e18c32bc75b3596

    SHA256

    142d930f74d1c7f12cee84b2182828d0d76803cfdb8540378e45d56dbce94c7e

    SHA512

    3f70602fd541a7bbd13389263df2a3118c0c8daf9f5afc625b25991f5ca0cbbd2b339dcd68cb86e0f66e5f26c5753a61bcbc670ad05cae44a1174dd66ca697ad

  • /data/user/0/com.pix.art.TSR/shared_prefs/com.google.android.gms.appid.xml
    MD5

    236bcdc994ea6928647e0e8ff50b18e2

    SHA1

    a8883df07d28a17d54f63ba1d259ee46394b6105

    SHA256

    f1e50ede23d4c8e2c05342cd076be3828cd40f31079305c05c223593c5a634ee

    SHA512

    764a9c378defba9a946e15e04e4eac608744ce6c537a332fdbd47c00f880a9b3689d404c830362e0e26437233539c9cfb99292d02fbd1da65998cf5f7eb75e38

  • /data/user/0/com.pix.art.TSR/shared_prefs/com.pix.art.TSR_preferences.xml
    MD5

    8260411011f5ab65e3d7e5f3a651fd2b

    SHA1

    bc54c51e54552bb4b38e2042b589cb0d5eb8447b

    SHA256

    05dd8fc94bb74dba66f6a4bb9f4b8fc289482e2e840783afd5a2ca3302869e56

    SHA512

    d0bc4e4047644aa97cd8aa84221d398760f6119e98c4c988bc5ca0ef2e6c12dad5c524243c341b89b2cb6e5dfedad4a34d57e91c622d87a8e438837229bd4630

  • /data/user/0/com.pix.art.TSR/shared_prefs/com.pix.art.TSR_preferences.xml
    MD5

    0f792fa4b6e308dcdc852f0bc9ab036e

    SHA1

    e8446fc5fe4277eb46ff624d531505d506d45bd1

    SHA256

    a8da443832f0691631dd8cf7a3695d25c48cc6f4b896173088fb28be54bce497

    SHA512

    25d369c9af4e153621a7a0e54f0c898e5794771d2871561f129dcd4a83a7078228efa937bc5d84461d9176e4518a0b9f45b99b3ee5668c6f772e84d059cb984b

  • /data/user/0/com.pix.art.TSR/shared_prefs/com.pix.art.TSR_preferences.xml
    MD5

    45cbbec66ef57c9ff1207e8c1eb7fd2c

    SHA1

    c37148c0e8acdb00282138e662080712201c19fd

    SHA256

    6339e70307fb78a0ca22c66169e69611d980f2d462290e21c4ca2788b8177e1c

    SHA512

    a28fe94d7d64938b51ee7576866b357a7180b7d4a350d0a9dc3e8798b418b443f02c8df3ba7f6d881b2e75b2d0365f01dd3bf3d932e57ffdb315103013fa9775

  • /product/app/TrichromeLibrary/TrichromeLibrary.apk
    MD5

    39528daeaf7245ec0be5c52098c44a95

    SHA1

    e10152848a684f53e9dc35c38d99ff0add509227

    SHA256

    4d59ccc291c4f9a6170a14baa457d50111354c8ee389043b6b40b08092da835b

    SHA512

    fa5ea98f323a05d2da2934021cd42f3791cb9c11a391ff0d026bf66a1af48f008c465f8eaa1580949c125cb758b16f47efece125919bda440876dbb843dc3e09

  • /product/app/TrichromeLibrary/TrichromeLibrary.apk