a09d435c5988e77ca115bdfe456821b9622994fd419645c0a2d07bc4658535f0

Resubmissions

07-08-2021 15:35

210807-y36fw5j5ce 8

07-08-2021 15:30

210807-8f2q58lffa 8

Analysis

max time kernel
557840s
platform
android_x86
resource
android-x86-arm
submitted
07-08-2021 15:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Kurulum.apk
Size

1.5MB
MD5

0a64111f4ad75eec84d10de7f1b89c6c
SHA1

c2c1598f562f319e6a7ea0e3879218584f097c08
SHA256

a09d435c5988e77ca115bdfe456821b9622994fd419645c0a2d07bc4658535f0
SHA512

b53902334be10eaf0a2d17146efccb2b84e9f1bb82fcb234d02eca7fed65b65ecc4eb58a85621547dc574cc1a301a04b92934acdbd49c857d64b84dabafa0261

Score

7^/10

obfuscation

Malware Config

Signatures

Loads dropped Dex/Jar 2 IoCs

Runs executable file dropped to the device during analysis.

Processes:

/system/bin/dex2oatcom.bzyidn.rajgylsl

ioc	pid	process
/data/user/0/com.bzyidn.rajgylsl/code_cache/secondary-dexes/base.apk.classes1.zip	4726	/system/bin/dex2oat
/data/user/0/com.bzyidn.rajgylsl/code_cache/secondary-dexes/base.apk.classes1.zip	4686	com.bzyidn.rajgylsl

Requests enabling of the accessibility settings. 1 IoCs

Processes:

com.bzyidn.rajgylsl

description ioc process

Intent action android.settings.ACCESSIBILITY_SETTINGS com.bzyidn.rajgylsl
Uses reflection 1 IoCs
obfuscation

Processes:

com.bzyidn.rajgylsl

description pid process

Acesses field com.android.okhttp.internal.tls.OkHostnameVerifier.INSTANCE 4686 com.bzyidn.rajgylsl

description	ioc	process
Intent action	android.settings.ACCESSIBILITY_SETTINGS	com.bzyidn.rajgylsl

description	pid	process
Acesses field com.android.okhttp.internal.tls.OkHostnameVerifier.INSTANCE	4686	com.bzyidn.rajgylsl

com.bzyidn.rajgylsl
1⤵
- Loads dropped Dex/Jar
- Requests enabling of the accessibility settings.
- Uses reflection
PID:4686
- com.bzyidn.rajgylsl
  2⤵
  PID:4726
- /system/bin/dex2oat
  2⤵
  - Loads dropped Dex/Jar
  PID:4726

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.bzyidn.rajgylsl/code_cache/secondary-dexes/MultiDex.lock

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.bzyidn.rajgylsl/code_cache/secondary-dexes/base.apk.classes1.zip

MD5
d82fd133c7cf030d891f612bc0c1afef

SHA1
14a34a345f7cc18ddebf6b4fc9d13f1c867da566

SHA256
e8c9766d95ae7c99b7406efe0d07c601024725d522693622f04f888ffc073437

SHA512
5aade4b049ac2f223b36b5a4939620861ad0c69093888be423bb8b0e9f98d024d409bb2a268d62259a27b75976dd197a89b7e1d4a99f1e608bbdb0aba06acf97

Download Submit
/data/user/0/com.bzyidn.rajgylsl/code_cache/secondary-dexes/base.apk.classes1.zip

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.bzyidn.rajgylsl/code_cache/secondary-dexes/base.apk.classes1.zip.x86.flock

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.bzyidn.rajgylsl/code_cache/secondary-dexes/oat/x86/base.apk.classes1.odex

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.bzyidn.rajgylsl/code_cache/secondary-dexes/oat/x86/base.apk.classes1.vdex

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.bzyidn.rajgylsl/code_cache/secondary-dexes/tmp-base.apk.classes5364669018648566556.zip

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml

MD5
804f081873079f8f887c9c23e445b3c1

SHA1
a73fd639ca092734a2df9c1fc533d540139375bb

SHA256
f19310c8a3c6d3d98ec57bbe0eb1d0b12020991f636aabdb20088452f21ea71e

SHA512
b0e402d0269806f35afd01df09d838214f3c3e11f3fd80a057a654502cbabc5a75ba1ede901df683b0ed0c139b03f1c766fba9a67995948d8d25c58b625c86e3

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml

MD5
e39d7f0d15c1e9ecd6dd3d5929d0b626

SHA1
96d3c30083d9defc9f8bfc0684f33791e0b1fe68

SHA256
282c44747d75b0129fd2a7f2e93a7186c383aa2c04d5a948b2503b00afdfdce4

SHA512
587389acb2ca794f24d8b70a0f0e3b83b456eb3f6fd21cc4485b83dba0873f8496d48fc23cdf8b8275ca4a6826eb5c4f0023535d41490c1d7de24d448d79e154

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml

MD5
b420481e262af687e7fd5eaa4af18076

SHA1
8ed913686612408fcdaaa5db15eff341864751ee

SHA256
bb0a4c274835cbce42bd91435209b4b56f373c0bf63a48ab5c2074ef348d775d

SHA512
aeb6a071d0318b46dc93f40b5fa8f098f5b38f537e78fa7b17398e11f48c926a503df1fcb60021c437f5ad28e7f39b3841990f3f8e798d9a37fb09d317e70b67

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml

MD5
a9ec4d2bd21fd5de999eefa858d65844

SHA1
bdb7ed15432447da38e4c2f0ca355943b935b372

SHA256
a8e271e8f5d87d0512bd03b8dc58fc1c8586717fdd5a44ac0756ed2fd95aa4e4

SHA512
0fbd41999cc9cceaaa43b741f71f34bb89c687051a3e5c22e044d58c0813d05219d263208a897cd0a7bbed97b544840c2f57d35d5fc879165bd18b5003be6ee1

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/multidex.version.xml

MD5
3170711482cdad073c0b82bf82366612

SHA1
67e3ecba64e619eade3303c5fb87d43f787c5695

SHA256
7804f907d5af96d7445ef5d3d4fb192ad0f79e8e02017a80c19bce7711401169

SHA512
83d9cd2d1155e913afac3c38569b554bb6f6202ef66ba0ba720c9ea58d9fa8075bfa7a8fa6d845bf1dcb960942c1b74dd8c1c770637499903f110c1c1d99713d

Download Submit