088ad3a6f53baae24acd7acd63b2ed19d6be41f34fc77cce78560b57012055f7

Analysis

max time kernel
336027s
max time network
127s
platform
android_x64
resource
android-x64
submitted
05-08-2021 01:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

impt_slots.apk
Size

1.9MB
MD5

e33ed383d6b1fc14b81ec5e5635b574f
SHA1

26e15a15e6dd483e0acd13777fb41345911bda15
SHA256

088ad3a6f53baae24acd7acd63b2ed19d6be41f34fc77cce78560b57012055f7
SHA512

183b3aa1e2405adbefcd68f663b0638a03d071c748d280ac0ecaf19b449f8f3ed75dd7e3cb35e7d74007b58d561f779a53b019996d9a529702c20d4eb80e806a

Score

8^/10

obfuscation

Malware Config

Signatures

Requests dangerous framework permissions 35 IoCs

Processes:

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Uses reflection 29 IoCs

obfuscation

Processes:

com.playtech.installer.iIMONE

description	pid	process
Acesses field com.android.org.conscrypt.OpenSSLSocketFactoryImpl.sslParameters	3631	com.playtech.installer.iIMONE
Acesses field com.android.org.conscrypt.SSLParametersImpl.x509TrustManager	3631	com.playtech.installer.iIMONE
Acesses field android.os.Build$VERSION.SDK_INT	3631	com.playtech.installer.iIMONE
Invokes method java.util.concurrent.ScheduledThreadPoolExecutor.setRemoveOnCancelPolicy	3631	com.playtech.installer.iIMONE
Invokes method java.util.concurrent.ScheduledThreadPoolExecutor.setRemoveOnCancelPolicy	3631	com.playtech.installer.iIMONE
Invokes method java.util.concurrent.ScheduledThreadPoolExecutor.setRemoveOnCancelPolicy	3631	com.playtech.installer.iIMONE
Invokes method java.util.concurrent.ScheduledThreadPoolExecutor.setRemoveOnCancelPolicy	3631	com.playtech.installer.iIMONE
Invokes method java.util.concurrent.ScheduledThreadPoolExecutor.setRemoveOnCancelPolicy	3631	com.playtech.installer.iIMONE
Invokes method java.util.concurrent.ScheduledThreadPoolExecutor.setRemoveOnCancelPolicy	3631	com.playtech.installer.iIMONE
Invokes method java.util.concurrent.ScheduledThreadPoolExecutor.setRemoveOnCancelPolicy	3631	com.playtech.installer.iIMONE
Acesses field sun.misc.Unsafe.theUnsafe	3631	com.playtech.installer.iIMONE
Invokes method java.util.concurrent.ScheduledThreadPoolExecutor.setRemoveOnCancelPolicy	3631	com.playtech.installer.iIMONE
Acesses field com.android.okhttp.internal.tls.OkHostnameVerifier.INSTANCE	3631	com.playtech.installer.iIMONE
Invokes method java.util.concurrent.ScheduledThreadPoolExecutor.setRemoveOnCancelPolicy	3631	com.playtech.installer.iIMONE
Acesses field javax.security.auth.x500.X500Principal.thisX500Name	3631	com.playtech.installer.iIMONE
Acesses field javax.security.auth.x500.X500Principal.thisX500Name	3631	com.playtech.installer.iIMONE
Acesses field javax.security.auth.x500.X500Principal.thisX500Name	3631	com.playtech.installer.iIMONE
Acesses field javax.security.auth.x500.X500Principal.thisX500Name	3631	com.playtech.installer.iIMONE
Invokes method java.util.concurrent.ScheduledThreadPoolExecutor.setRemoveOnCancelPolicy	3631	com.playtech.installer.iIMONE
Invokes method java.util.concurrent.ScheduledThreadPoolExecutor.setRemoveOnCancelPolicy	3631	com.playtech.installer.iIMONE
Invokes method java.util.concurrent.ScheduledThreadPoolExecutor.setRemoveOnCancelPolicy	3631	com.playtech.installer.iIMONE
Invokes method java.util.concurrent.ScheduledThreadPoolExecutor.setRemoveOnCancelPolicy	3631	com.playtech.installer.iIMONE
Invokes method java.util.concurrent.ScheduledThreadPoolExecutor.setRemoveOnCancelPolicy	3631	com.playtech.installer.iIMONE
Invokes method java.util.concurrent.ScheduledThreadPoolExecutor.setRemoveOnCancelPolicy	3631	com.playtech.installer.iIMONE
Invokes method java.util.concurrent.ScheduledThreadPoolExecutor.setRemoveOnCancelPolicy	3631	com.playtech.installer.iIMONE
Invokes method java.util.concurrent.ScheduledThreadPoolExecutor.setRemoveOnCancelPolicy	3631	com.playtech.installer.iIMONE
Invokes method java.util.concurrent.ScheduledThreadPoolExecutor.setRemoveOnCancelPolicy	3631	com.playtech.installer.iIMONE
Invokes method java.util.concurrent.ScheduledThreadPoolExecutor.setRemoveOnCancelPolicy	3631	com.playtech.installer.iIMONE
Invokes method java.util.concurrent.ScheduledThreadPoolExecutor.setRemoveOnCancelPolicy	3631	com.playtech.installer.iIMONE

com.playtech.installer.iIMONE
1⤵
- Uses reflection
PID:3631

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.playtech.installer.iIMONE/cache/picasso-cache/journal.tmp
MD5
37e8e716e0e2f4a0b05cd9571d95b84d

SHA1
f8d068f6931707bddb8cd69f706f2224ad1fea3c

SHA256
7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

SHA512
e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

Download Submit
/data/user/0/com.playtech.installer.iIMONE/files/Client.apk
MD5
649fac7ce64961cdcd178c62ef0e6231

SHA1
ffb5ad4471d498bbba5eb439d3e83f1972c6d2f4

SHA256
805a934d9138b98192b83a8c049ad895012dd4268d9fbbd2b855dd634fd35e13

SHA512
4f3996efd2eb9d1fb7e3607af91c704c5de11b7355934ab7358e502b04c2741b4dbc2ccdc217edc27b082408e08f49a2c8a42a4568d589516ff94f6bd83b09b7

Download Submit
/data/user/0/com.playtech.installer.iIMONE/files/Client.apk
MD5
649fac7ce64961cdcd178c62ef0e6231

SHA1
ffb5ad4471d498bbba5eb439d3e83f1972c6d2f4

SHA256
805a934d9138b98192b83a8c049ad895012dd4268d9fbbd2b855dd634fd35e13

SHA512
4f3996efd2eb9d1fb7e3607af91c704c5de11b7355934ab7358e502b04c2741b4dbc2ccdc217edc27b082408e08f49a2c8a42a4568d589516ff94f6bd83b09b7

Download Submit
/data/user/0/com.playtech.installer.iIMONE/files/Client.apk
MD5
649fac7ce64961cdcd178c62ef0e6231

SHA1
ffb5ad4471d498bbba5eb439d3e83f1972c6d2f4

SHA256
805a934d9138b98192b83a8c049ad895012dd4268d9fbbd2b855dd634fd35e13

SHA512
4f3996efd2eb9d1fb7e3607af91c704c5de11b7355934ab7358e502b04c2741b4dbc2ccdc217edc27b082408e08f49a2c8a42a4568d589516ff94f6bd83b09b7

Download Submit
/data/user/0/com.playtech.installer.iIMONE/files/Client.apk
MD5
649fac7ce64961cdcd178c62ef0e6231

SHA1
ffb5ad4471d498bbba5eb439d3e83f1972c6d2f4

SHA256
805a934d9138b98192b83a8c049ad895012dd4268d9fbbd2b855dd634fd35e13

SHA512
4f3996efd2eb9d1fb7e3607af91c704c5de11b7355934ab7358e502b04c2741b4dbc2ccdc217edc27b082408e08f49a2c8a42a4568d589516ff94f6bd83b09b7

Download Submit
/data/user/0/com.playtech.installer.iIMONE/files/Client.apk
MD5
649fac7ce64961cdcd178c62ef0e6231

SHA1
ffb5ad4471d498bbba5eb439d3e83f1972c6d2f4

SHA256
805a934d9138b98192b83a8c049ad895012dd4268d9fbbd2b855dd634fd35e13

SHA512
4f3996efd2eb9d1fb7e3607af91c704c5de11b7355934ab7358e502b04c2741b4dbc2ccdc217edc27b082408e08f49a2c8a42a4568d589516ff94f6bd83b09b7

Download Submit
/data/user/0/com.playtech.installer.iIMONE/files/Client.apk
MD5
649fac7ce64961cdcd178c62ef0e6231

SHA1
ffb5ad4471d498bbba5eb439d3e83f1972c6d2f4

SHA256
805a934d9138b98192b83a8c049ad895012dd4268d9fbbd2b855dd634fd35e13

SHA512
4f3996efd2eb9d1fb7e3607af91c704c5de11b7355934ab7358e502b04c2741b4dbc2ccdc217edc27b082408e08f49a2c8a42a4568d589516ff94f6bd83b09b7

Download Submit
/data/user/0/com.playtech.installer.iIMONE/files/Client.apk
MD5
649fac7ce64961cdcd178c62ef0e6231

SHA1
ffb5ad4471d498bbba5eb439d3e83f1972c6d2f4

SHA256
805a934d9138b98192b83a8c049ad895012dd4268d9fbbd2b855dd634fd35e13

SHA512
4f3996efd2eb9d1fb7e3607af91c704c5de11b7355934ab7358e502b04c2741b4dbc2ccdc217edc27b082408e08f49a2c8a42a4568d589516ff94f6bd83b09b7

Download Submit
/data/user/0/com.playtech.installer.iIMONE/files/config.json
MD5
dd0eac455ccce5eb5e01e6aee3b7bb29

SHA1
07026610af5e5eeda817c12b55c726bdbd555ce5

SHA256
042e8399d387b2b1245ec8e0d1db1fd43074284780c710763aa13e8600ba021e

SHA512
245c26a0419b5db7166ea01165ca1c51f580104e9849baebb5f2651d6864dd73ab5832c6e78c09f487478fbea01ca3205e40e68ff1a1099a4a116c36bbc99287

Download Submit
/data/user/0/com.playtech.installer.iIMONE/shared_prefs/MAIN.xml
MD5
0ca59242ea8d4862975122d49fde3b62

SHA1
2c72275e75757e39cb439ba1b9b4174a0101fa12

SHA256
01fea9a4da1fb9dae3f4c376b98f45e250f263fe76db7c77906701476d85f7ec

SHA512
f925e6be2c65949d9ea85c96a7b066c0643cfdfbff8dee24729bf658d0869daf8bdcb8b91fe7b062b67aa2d7f697192d0a398849ce5e16097064db6564f6fcf9

Download Submit
/data/user/0/com.playtech.installer.iIMONE/shared_prefs/MAIN.xml
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.playtech.installer.iIMONE/shared_prefs/MAIN.xml
MD5
50d1ef3a5fbed50af4671c747cc41c6e

SHA1
e4292e7cd60dc5dffb4332d004a19d04b8e7e5ba

SHA256
bb19be91cde10b57678085f20bf5f71313e989a009b60d07ba6bad8634e57b38

SHA512
77e5527ccfd0f17b33b17aacaed5240f18322746b69c1f5174949927356e88a529e97e73660fca45613ed0e349c93bc53beda8dbd742d023c36955e3914d1318

Download Submit
/data/user/0/com.playtech.installer.iIMONE/shared_prefs/com.playtech.installer.iIMONE_preferences.xml
MD5
90a6c5ba4565eb828adda9cb970b7919

SHA1
635c547805924ba1cb0a7f119306d139edda28d7

SHA256
5d7e893359d8ca2c72e2baa354fa98206969050150c5e67df33bd0dd7b233812

SHA512
5928cf0700b864900c2470c2d60b3778248fd12e0083ce7a41077c4ef0f9e37b98e7be97299034fa72fc0e2bd8731eaa1424660f8e1d115876cba94c8207e42e

Download Submit
/storage/emulated/0/config.json
MD5
4fb2764f780419de5bad481da92cf017

SHA1
dcd7e47d882627ea83bf5659091a513299581c6d

SHA256
7b2ea79ca5a91689a253e9a7a4dd8a8e7553e7789c637119e645473be4ee2f75

SHA512
2d43cfbd96e26af95383d5b1ab7862d778712d1e92958aa4c584f2bf0ac8744c72213ac001f84ea7ab1cf51887b3fe204922b281ef0c4564e3870e7a538f03b6

Download Submit