Analysis
-
max time kernel
264832s -
max time network
139s -
platform
android_x64 -
resource
android-x64-arm64 -
submitted
04-08-2021 06:07
Static task
static1
Behavioral task
behavioral1
Sample
Download(2).apk
Resource
android-x86-arm
Behavioral task
behavioral2
Sample
Download(2).apk
Resource
android-x64-arm64
Behavioral task
behavioral3
Sample
Download(2).apk
Resource
android-x64
General
-
Target
Download(2).apk
-
Size
2.0MB
-
MD5
fda59dd3baf55fac67d6123ea64d29e8
-
SHA1
88ee2246f6e7790179a152b6e95ba55a3fa4cdac
-
SHA256
319d3a10c72d81ac09dc525199966586a211f0b10405f9e7957e40adf1d65bcb
-
SHA512
d7951206533b0af93cbd1e0c1b502d37a6df0639ee6b7430a2bbc4522f25b5cb8ffeace104b1db06ddb9a403cb6b0fb45d396bee88b9b20f4e2ffca8e7c0c7f0
Malware Config
Signatures
-
Loads dropped Dex/Jar 3 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.pix.art.TSRioc pid process /data/user/0/com.pix.art.TSR/files/c73172c6.dex 4271 com.pix.art.TSR /product/app/TrichromeLibrary/TrichromeLibrary.apk 4271 com.pix.art.TSR /product/app/TrichromeLibrary/TrichromeLibrary.apk 4271 com.pix.art.TSR -
Uses reflection 5 IoCs
Processes:
com.pix.art.TSRdescription pid process Invokes method android.util.Log.d 4271 com.pix.art.TSR Invokes method dalvik.system.CloseGuard.get 4271 com.pix.art.TSR Invokes method dalvik.system.CloseGuard.open 4271 com.pix.art.TSR Invokes method android.security.NetworkSecurityPolicy.getInstance 4271 com.pix.art.TSR Invokes method android.security.NetworkSecurityPolicy.isCleartextTrafficPermitted 4271 com.pix.art.TSR
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.pix.art.TSR/app_webview/.com.google.Chrome.JLRv0jMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/app_webview/Default/Web DataMD5
536e58581641e767a8bf8eca3b8cde9e
SHA1750a88189322e36147068f1c585f02163ff3a388
SHA2563ba04fa6622801be4e625176b175ff75caf19c8966c13418bf1433433eefa1a0
SHA512498da0911c702bc683cf153ce9b66044642378eafb79bffe0afd7f7460bd12a4c9bb424e1606550d8bbfb25dede34b5ad6ad1f7ee698c8d5ff67208625612319
-
/data/user/0/com.pix.art.TSR/app_webview/Default/Web Data-journalMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/app_webview/variations_seed_newMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/app_webview/variations_stampMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/app_webview/webview_data.lockMD5
85a4fcf9856a35d3956f969c080c69e3
SHA1fcb9d5e0dc6452994898dcac18ae79ea0e437e24
SHA2567c7f85eebe35cdb1b02c6f3cdb64aba12ef2d37937dcdc42cc3c3ce1f70557c5
SHA512ca77f3a3553d0872f3c269bff4bdab37502fa4eb4352a55387d1b51d3941a7a25cc0ef8b466bcebeef8725fa241e620fcab338bdc569cb655b8248812c184f9a
-
/data/user/0/com.pix.art.TSR/cache/WebView/Crashpad/settings.datMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/cache/WebView/Default/HTTP Cache/Code Cache/js/indexMD5
54cb446f628b2ea4a5bce5769910512e
SHA1c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA5128f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
-
/data/user/0/com.pix.art.TSR/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-indexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/cache/WebView/Default/HTTP Cache/Code Cache/wasm/indexMD5
54cb446f628b2ea4a5bce5769910512e
SHA1c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA5128f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
-
/data/user/0/com.pix.art.TSR/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-indexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/cache/WebView/font_unique_name_table.pbMD5
b18833d483828180924a6d4048fca1a0
SHA1d7edde78cc26221c9455a87ca3eca8960b6673a8
SHA256d9c4ea0a7c399884f8a908a33a4d675a64b557b50916e62ab96fa2213e6d4801
SHA51211e6bf7e067884138dcd6908e311321a9eca1e4926323f49736f9dfdebd4b548064beacc356f78e3f32a99769109b154e145ef1162e6a9547aca878f0dd4ee7c
-
/data/user/0/com.pix.art.TSR/files/BGEaUZrYMD5
8ae8f4cf80613a3dbefb1d44f45c6b67
SHA13d18d1515bca6931c7cd2009557880623aa2ed1c
SHA256cf7835cebc3fba6d2837cc41db0a6fd250559eb542f7a41a5938d79ee7c936ab
SHA5124e3fabc7b92d10198e43a4beecc5ed60e193b5c5cbc52ccd0b2170879cec04ac86e5ec069e16a87460c2fabc7e31c656f3d493bff135a3925d0d98233ae5362e
-
/data/user/0/com.pix.art.TSR/files/TrPJFdsNMD5
e9294c5a3a0fe21bc3c7c55e842cd966
SHA1858dde35f52be3bbe21934a13e1d19611d244203
SHA256109eeb405df66e5228f2b042962b92126326dd3dcabc1c16e82d310984004651
SHA512098d851052a2daba6cac35cf192e6949ccc3a1ecd04d8f1f4f8fb014f83f14b9995134515d718e426f47cfccd273cd6059f11d258105e4ac5f7f0ed0a709424f
-
/data/user/0/com.pix.art.TSR/files/c73172c6.dexMD5
fdca68013efb9db880098e97fabf0a87
SHA1bed03bc753f27366ee4626445afe8f703b0711a2
SHA256a38cf191fd7f66aa9f87ff03fd0efd2114b0305e7de9a204301142b487f158b0
SHA51293f37267182d5b75916f2ca6a2becb5864e93409ef5cb539783a002b03b64ce563121610ad5f14f054fa657b63c93b64f59aee1db93440a8704b4993cfa07bff
-
/data/user/0/com.pix.art.TSR/files/c73172c6.dexMD5
cbf4527f8986c6520e09d0dc2c34283a
SHA125c1fe4cd2b8d94ab0eec5fa6207fb18326f2f54
SHA25620ffc952666540b23336515f975a10f866dcbe132eff25aa7b98adb0634f314d
SHA5123ae22a0e833829cec8dcc2afa4eb54cd46a123f187a3daf2d12a213d98fd68d422b890315e1c8a1c87c6778f7f64d3cfbd0693aaac53dc8529d5ba7c8918435c
-
/data/user/0/com.pix.art.TSR/no_backup/com.google.InstanceId.propertiesMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/no_backup/com.google.android.gms.appid-no-backupMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/shared_prefs/WebViewChromiumPrefs.xmlMD5
97ccd9a2b2063143df56b6937f961ca4
SHA15e78a91ae5df289ce83443cb7d5589dd3504fb5d
SHA256248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
SHA51286c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b
-
/data/user/0/com.pix.art.TSR/shared_prefs/com.google.android.gms.appid.xmlMD5
3dad0da8171d4091d99c4609093eb65e
SHA17f5fc457acea563cc72961f43e18c32bc75b3596
SHA256142d930f74d1c7f12cee84b2182828d0d76803cfdb8540378e45d56dbce94c7e
SHA5123f70602fd541a7bbd13389263df2a3118c0c8daf9f5afc625b25991f5ca0cbbd2b339dcd68cb86e0f66e5f26c5753a61bcbc670ad05cae44a1174dd66ca697ad
-
/data/user/0/com.pix.art.TSR/shared_prefs/com.google.android.gms.appid.xmlMD5
236bcdc994ea6928647e0e8ff50b18e2
SHA1a8883df07d28a17d54f63ba1d259ee46394b6105
SHA256f1e50ede23d4c8e2c05342cd076be3828cd40f31079305c05c223593c5a634ee
SHA512764a9c378defba9a946e15e04e4eac608744ce6c537a332fdbd47c00f880a9b3689d404c830362e0e26437233539c9cfb99292d02fbd1da65998cf5f7eb75e38
-
/data/user/0/com.pix.art.TSR/shared_prefs/com.pix.art.TSR_preferences.xmlMD5
8260411011f5ab65e3d7e5f3a651fd2b
SHA1bc54c51e54552bb4b38e2042b589cb0d5eb8447b
SHA25605dd8fc94bb74dba66f6a4bb9f4b8fc289482e2e840783afd5a2ca3302869e56
SHA512d0bc4e4047644aa97cd8aa84221d398760f6119e98c4c988bc5ca0ef2e6c12dad5c524243c341b89b2cb6e5dfedad4a34d57e91c622d87a8e438837229bd4630
-
/data/user/0/com.pix.art.TSR/shared_prefs/com.pix.art.TSR_preferences.xmlMD5
0f792fa4b6e308dcdc852f0bc9ab036e
SHA1e8446fc5fe4277eb46ff624d531505d506d45bd1
SHA256a8da443832f0691631dd8cf7a3695d25c48cc6f4b896173088fb28be54bce497
SHA51225d369c9af4e153621a7a0e54f0c898e5794771d2871561f129dcd4a83a7078228efa937bc5d84461d9176e4518a0b9f45b99b3ee5668c6f772e84d059cb984b
-
/data/user/0/com.pix.art.TSR/shared_prefs/com.pix.art.TSR_preferences.xmlMD5
45cbbec66ef57c9ff1207e8c1eb7fd2c
SHA1c37148c0e8acdb00282138e662080712201c19fd
SHA2566339e70307fb78a0ca22c66169e69611d980f2d462290e21c4ca2788b8177e1c
SHA512a28fe94d7d64938b51ee7576866b357a7180b7d4a350d0a9dc3e8798b418b443f02c8df3ba7f6d881b2e75b2d0365f01dd3bf3d932e57ffdb315103013fa9775
-
/product/app/TrichromeLibrary/TrichromeLibrary.apkMD5
39528daeaf7245ec0be5c52098c44a95
SHA1e10152848a684f53e9dc35c38d99ff0add509227
SHA2564d59ccc291c4f9a6170a14baa457d50111354c8ee389043b6b40b08092da835b
SHA512fa5ea98f323a05d2da2934021cd42f3791cb9c11a391ff0d026bf66a1af48f008c465f8eaa1580949c125cb758b16f47efece125919bda440876dbb843dc3e09
-
/product/app/TrichromeLibrary/TrichromeLibrary.apk