Analysis
-
max time kernel
264825s -
max time network
87s -
platform
android_x64 -
resource
android-x64 -
submitted
04-08-2021 06:07
Static task
static1
Behavioral task
behavioral1
Sample
Download(2).apk
Resource
android-x86-arm
Behavioral task
behavioral2
Sample
Download(2).apk
Resource
android-x64-arm64
Behavioral task
behavioral3
Sample
Download(2).apk
Resource
android-x64
General
-
Target
Download(2).apk
-
Size
2.0MB
-
MD5
fda59dd3baf55fac67d6123ea64d29e8
-
SHA1
88ee2246f6e7790179a152b6e95ba55a3fa4cdac
-
SHA256
319d3a10c72d81ac09dc525199966586a211f0b10405f9e7957e40adf1d65bcb
-
SHA512
d7951206533b0af93cbd1e0c1b502d37a6df0639ee6b7430a2bbc4522f25b5cb8ffeace104b1db06ddb9a403cb6b0fb45d396bee88b9b20f4e2ffca8e7c0c7f0
Malware Config
Signatures
-
Loads dropped Dex/Jar 3 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.pix.art.TSRioc pid process /data/user/0/com.pix.art.TSR/files/c73172c6.dex 3641 com.pix.art.TSR /product/app/webview/webview.apk 3641 com.pix.art.TSR /product/app/webview/webview.apk 3641 com.pix.art.TSR -
Uses reflection 4 IoCs
Processes:
com.pix.art.TSRdescription pid process Invokes method dalvik.system.CloseGuard.get 3641 com.pix.art.TSR Invokes method dalvik.system.CloseGuard.open 3641 com.pix.art.TSR Invokes method android.security.NetworkSecurityPolicy.getInstance 3641 com.pix.art.TSR Invokes method android.security.NetworkSecurityPolicy.isCleartextTrafficPermitted 3641 com.pix.art.TSR
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.pix.art.TSR/app_webview/.org.chromium.Chromium.nfexeRMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/app_webview/Web DataMD5
dfea4f9a562d22c658ec695eca31ea04
SHA12e48be6baf86078d93f14fc38fe9f395c1c54261
SHA256a01b4f35e09bbcdf9753512d4d3ac0b82c8e2f09e2176fa4a5c2523909795b2b
SHA5128e0aab3c5f29a8737b4713b4a1622aa71b3574feabfb41a098f1326b80472c3fea053e759036c44df71aee1a8a1e9caf93f17a9eec88ab278062d7ed48907789
-
/data/user/0/com.pix.art.TSR/app_webview/Web Data-journalMD5
e6aa1625f156d15e0c4281a76979a069
SHA1225c301c81125169e239ef9d2d55d2c26d662449
SHA256b779ffdc34c0602c1e38552556a0434da6a65505c06f7ec3bd3d1699e01182bc
SHA512490176f2663fb559a8d205bdbd71e5e8863f8aa026138b1b9267f1f057963e668edd358027426f29abc44ea2fb1d3dbc31c5a49fc9da1624c4e580b651e835a7
-
/data/user/0/com.pix.art.TSR/app_webview/metrics_guidMD5
15873a4fdd1dbb266d438eede60b7fb2
SHA121cd54a0ffc9eb451f560f0e57f36207a1cec836
SHA256535e8f303743c1282bae7b06a1e8d71fe4c1c9b881dde3404bb1135da6b6aab2
SHA51235fa94a1174789b8f0c0d09d26d9aeefb49c10d552a3ddf52da39e1f00d811b2c09a5e1af743c5d4d8bd888cbbd0d17c725d7a12cff87fc54a205b2042871f1f
-
/data/user/0/com.pix.art.TSR/app_webview/metrics_guidMD5
15873a4fdd1dbb266d438eede60b7fb2
SHA121cd54a0ffc9eb451f560f0e57f36207a1cec836
SHA256535e8f303743c1282bae7b06a1e8d71fe4c1c9b881dde3404bb1135da6b6aab2
SHA51235fa94a1174789b8f0c0d09d26d9aeefb49c10d552a3ddf52da39e1f00d811b2c09a5e1af743c5d4d8bd888cbbd0d17c725d7a12cff87fc54a205b2042871f1f
-
/data/user/0/com.pix.art.TSR/app_webview/variations_seed_newMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/app_webview/variations_stampMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/app_webview/webview_data.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/cache/WebView/Crashpad/settings.datMD5
60e4fd979ea45fe58bac832a086cf2af
SHA10b1bf7562dcec5b4a88a8bcb59dff1c7740dd4d9
SHA256f8f5d0ff9667ac91d6a59954efc9c30aa059cba2ef05f7c6dad4273ac7ec7040
SHA5128dc65cfbc46408687035446a74c1299f3d0a2149bb3c23f7b746ea8561b3a16430532a85ccf17fa5f8c47c8c18d6f77db839ef5843780cd93abf6911a58a9b96
-
/data/user/0/com.pix.art.TSR/cache/org.chromium.android_webview/Code Cache/js/indexMD5
54cb446f628b2ea4a5bce5769910512e
SHA1c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA5128f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
-
/data/user/0/com.pix.art.TSR/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-indexMD5
480f553214b44e0b74a0bd982d872fba
SHA153ae614c17450a64e7f1879b0f5a95a31292f737
SHA256a658b90562f5e4bbc4ef43f7d5ed80fdfd7b1793a8c93a96f015a784f6015072
SHA512f8f3e03aeafad083f26e00bfa08054ae8efa335839c00acae618344d86733992b497886ae911506e24950d5587b67f9a597de4fca8c043c2ebdd7e56a9431072
-
/data/user/0/com.pix.art.TSR/files/BGEaUZrYMD5
0a9e54d6c7411faa03cbc27c157f37a6
SHA1fe82dc29e711bc416bdb875254aff785003a8f64
SHA256c5caf306cf35ebae5a2cfddcd24473fc25d3da37ad6767621a70dceab591afb7
SHA512dbd98838a7b1cb3a5a9ec3e898cb6d7faebc790eac018b91c577878ea659718ab4801a567f5868e4e10c0471581fa365cab5ed9bb470abcb474660a92b3d4743
-
/data/user/0/com.pix.art.TSR/files/TrPJFdsNMD5
01949c54dc5b7dbf5cfd31cc3bdd5569
SHA12f51ae9d944fa752af5d80437ee3c12f6d3e3d3c
SHA256171fe4e59074b55fde445a94c5d39934f5625ffc9f37c030b8e1f383786b010d
SHA512069beabf852db06ac80d51c6e958b3cabfd67414e8263a0b587df97c1676d4e687c695bf4cc1004eb06c0e1099dbf1683dd0739b2a632960c430c15e8353edfb
-
/data/user/0/com.pix.art.TSR/files/c73172c6.dexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/files/c73172c6.dexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/no_backup/com.google.InstanceId.propertiesMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/no_backup/com.google.android.gms.appid-no-backupMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.pix.art.TSR/shared_prefs/WebViewChromiumPrefs.xmlMD5
1357a1d7af06755d561a7ed916373baf
SHA14a0a0d8b4b81bba92924dd7cf53a44d438312729
SHA256647f3960ac648b24a8d9fa17f93f625437bd6f385636c56f10fefdd9cd447597
SHA51261f15a595e21cb7cbf0b1a5268da72b39ce767e43195b4b1a607125e6e1d3237aa382cffbeb122bee9111f01a61ed4aebc2bef6fa646891f43154b01c32d05d4
-
/data/user/0/com.pix.art.TSR/shared_prefs/com.google.android.gms.appid.xmlMD5
11a202dd970546ac624367d324796c3f
SHA16cf94e2211f3ea3a684975463c9d672c3e95fd9d
SHA2563f390eb132a3144c9a3f3c491b37da77a7f91f0f35a7142ee5ceab8377c645ed
SHA512f1f6b41fc9f796d87603e04adac463c74749bc9533c7a3a5f3d884cc2eb2d1652054ee052ca171ac891573adcb36f865132cc04427bc6cbcca67261fee47ee0e
-
/data/user/0/com.pix.art.TSR/shared_prefs/com.pix.art.TSR_preferences.xmlMD5
edfc56fdfcb69f7944133f724983d0ac
SHA1e166bb5551e0621ea3a1c6dc6589499e0252263e
SHA25620ff5ca48b315e13e16061904e750d19dbac750f11f63c39117222a46c1abd33
SHA51282e5e425d8398f63857fecb4b548c650cc713d4d790d7cd14053f249a992b83d512045ce2ac22530252fb81899f266c37fff691695a19cae6997a18511a97ce7
-
/data/user/0/com.pix.art.TSR/shared_prefs/com.pix.art.TSR_preferences.xmlMD5
5666a0a0f921449ae010a399c4e14988
SHA1695e0590e74000585d1a614992be95e4d2e4d9da
SHA25692a7a2a5bc92654242ecd530fb47260a94d9bfd9104901b8bbb866a10b9cce1b
SHA51270f8c5c4af8a2ab8d365913b2178f64f39121749381d25c82df615643bc00c7f98e5a2884b7d537c882a3ef573f2628a1d76c47902008d8c21cc576bda59c129
-
/product/app/webview/webview.apkMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/product/app/webview/webview.apkMD5
40e61bace188b6603d53fc3d8916a3f8
SHA174f7fd19aedc55977c79fa40230977ce4827cb03
SHA2566ede39de8efb9d2f0a2c467f4c9e303b03236e9c6917fb4d6fa2ef3b5d15090e
SHA51212f8424d5616774cf98c4955f9bd80e9967cc944d1ffee1a4cd6ec6f4e4fbf402030c58dde9480057c3d7e3c6805c6edccf77825a024dc87841783a5644b68af