a09d435c5988e77ca115bdfe456821b9622994fd419645c0a2d07bc4658535f0

Resubmissions

07-08-2021 15:35

210807-y36fw5j5ce 8

07-08-2021 15:30

210807-8f2q58lffa 8

Analysis

max time kernel
557836s
max time network
149s
platform
android_x64
resource
android-x64-arm64
submitted
07-08-2021 15:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Kurulum.apk
Size

1.5MB
MD5

0a64111f4ad75eec84d10de7f1b89c6c
SHA1

c2c1598f562f319e6a7ea0e3879218584f097c08
SHA256

a09d435c5988e77ca115bdfe456821b9622994fd419645c0a2d07bc4658535f0
SHA512

b53902334be10eaf0a2d17146efccb2b84e9f1bb82fcb234d02eca7fed65b65ecc4eb58a85621547dc574cc1a301a04b92934acdbd49c857d64b84dabafa0261

Score

7^/10

obfuscation

Malware Config

Signatures

Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.

Processes:

com.bzyidn.rajgylsl

ioc pid process

/data/user/0/com.bzyidn.rajgylsl/code_cache/secondary-dexes/base.apk.classes1.zip 4190 com.bzyidn.rajgylsl
Requests enabling of the accessibility settings. 1 IoCs

Processes:

com.bzyidn.rajgylsl

description ioc process

Intent action android.settings.ACCESSIBILITY_SETTINGS com.bzyidn.rajgylsl
Tries to add a device administrator. 1 IoCs

Processes:

com.bzyidn.rajgylsl

description ioc process

Intent action android.app.action.ADD_DEVICE_ADMIN com.bzyidn.rajgylsl

ioc	pid	process
/data/user/0/com.bzyidn.rajgylsl/code_cache/secondary-dexes/base.apk.classes1.zip	4190	com.bzyidn.rajgylsl

description	ioc	process
Intent action	android.settings.ACCESSIBILITY_SETTINGS	com.bzyidn.rajgylsl

description	ioc	process
Intent action	android.app.action.ADD_DEVICE_ADMIN	com.bzyidn.rajgylsl

Uses reflection 3 IoCs

obfuscation

Processes:

com.bzyidn.rajgylsl

description	pid	process
Acesses field com.android.okhttp.internal.tls.OkHostnameVerifier.INSTANCE	4190	com.bzyidn.rajgylsl
Acesses field javax.security.auth.x500.X500Principal.thisX500Name	4190	com.bzyidn.rajgylsl
Acesses field javax.security.auth.x500.X500Principal.thisX500Name	4190	com.bzyidn.rajgylsl

com.bzyidn.rajgylsl
1⤵
- Loads dropped Dex/Jar
- Requests enabling of the accessibility settings.
- Tries to add a device administrator.
- Uses reflection
PID:4190

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.bzyidn.rajgylsl/code_cache/secondary-dexes/MultiDex.lock

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.bzyidn.rajgylsl/code_cache/secondary-dexes/base.apk.classes1.zip

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.bzyidn.rajgylsl/code_cache/secondary-dexes/tmp-base.apk.classes2776813350483480450.zip

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml

MD5
c5861c9340b2f023e20ebe44b4b16558

SHA1
6723c68e833298f7eefc77dd440ea6cb3fcb1b79

SHA256
73ff89a468c5a0d17ce135c3418144ade6a2c4dc2eb1be433aa9ad3bca788e5b

SHA512
da409028be57a8feb55efee486c474eba2fdddccd82ba8f36bea1955d74b569f2723fe1dd32f16bffaeeedd70f73ec6f1ebfe048597306a8009917e6ce3ab66a

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml

MD5
a3dfe293b8b31b1a5fabe9b310ded7c5

SHA1
89e659838906070e2f9cc49e25a96f1d499e5612

SHA256
c23a4f63d8a03c1aae7ad8b37734cb5bd9197e8307e7a354ce69d1ec4766f8b9

SHA512
22a5c47169f438be7d218d44c2441d9de0fd6f53ada5e9cb611a79cc9f1e1f78aec07ed58bac3bd9817c50c2bcfcfc53a41a103be862a6f549bbe4a807fbe2d6

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml

MD5
6c773901936dbd06d34094de51e7104b

SHA1
d162569b91aedec324abfa6856ffa11ec9c563ec

SHA256
192f6bf995cbb512971f2dcfd4707f9797e9ba02d8340a18ffdf6ec6e5099541

SHA512
2a3a883845f5b89d11b7cdac3f99686fc03506e8e30b0ec24228918508b9e6d9cd6b0fbbece52d3288fd4fe0d4453a31b69c0558b585256b46faeb27be540ec3

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml

MD5
804f081873079f8f887c9c23e445b3c1

SHA1
a73fd639ca092734a2df9c1fc533d540139375bb

SHA256
f19310c8a3c6d3d98ec57bbe0eb1d0b12020991f636aabdb20088452f21ea71e

SHA512
b0e402d0269806f35afd01df09d838214f3c3e11f3fd80a057a654502cbabc5a75ba1ede901df683b0ed0c139b03f1c766fba9a67995948d8d25c58b625c86e3

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml

MD5
e39d7f0d15c1e9ecd6dd3d5929d0b626

SHA1
96d3c30083d9defc9f8bfc0684f33791e0b1fe68

SHA256
282c44747d75b0129fd2a7f2e93a7186c383aa2c04d5a948b2503b00afdfdce4

SHA512
587389acb2ca794f24d8b70a0f0e3b83b456eb3f6fd21cc4485b83dba0873f8496d48fc23cdf8b8275ca4a6826eb5c4f0023535d41490c1d7de24d448d79e154

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml

MD5
b420481e262af687e7fd5eaa4af18076

SHA1
8ed913686612408fcdaaa5db15eff341864751ee

SHA256
bb0a4c274835cbce42bd91435209b4b56f373c0bf63a48ab5c2074ef348d775d

SHA512
aeb6a071d0318b46dc93f40b5fa8f098f5b38f537e78fa7b17398e11f48c926a503df1fcb60021c437f5ad28e7f39b3841990f3f8e798d9a37fb09d317e70b67

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml

MD5
8b92436e4c7b15ced491bf4c1852ab5f

SHA1
dcf119d3c2f8a7b7832ccd2582ada7fa13ba4694

SHA256
e667d09c63f6aa598a80170b32cba88cfbe6fb70dd90f6a8ac6e81108cf9f41f

SHA512
7e11a925b37ebfed8159aa20fda6db6e798c24cd994f4fe1f44c135d5d8ea3ac0bb7e48ab114fb4bfe42c83a9496ed0251b97e05a2007b36d21d546e8f5b6a57

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml

MD5
65995810b2781bfa60a5b1e836623090

SHA1
bcc3f9d825c1bba9f8f05ba3b7da247b2298681c

SHA256
f8b7e1d73b97105ad04427cf53ba6afde558b9d140bc787a45b59cb450a18360

SHA512
6ae37a13a945b57c31f6ed59a0ebd8a77e0578f6a798953e17d0d159ff635ad619caac2d9834aff3533c7303636aaa5c827c474d28113d20f219c72730caaf09

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml

MD5
5545dccbc254cc9b636fbbfecf1093d8

SHA1
f5afe44a42dd9725a8faad7e3e60f33beba29c05

SHA256
cda6de04cf1f2eb907138e606d79e64c530e1c9a15a6fff82c312b5b9047a90a

SHA512
c45d41b38812d6897fcb061339ae2eca975373c7c54bf5727e5ebc49136439920eb4dffba85939ec724e836198c2ee44b4ab371183615d4a43728af769039cdf

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml

MD5
677b6f210950f9c09f9cbd6e21e32bad

SHA1
dd3311255f594490897b1c494e6671be5437bd45

SHA256
f481369e2044809d05f84b54f62babf6b81a66fdedf3a098890c61d442ab47c4

SHA512
31de589b3f38b8d5fd699aeb58389a7d97ac675b50bbec34ca75883e4c4071840bd5e04e34ba5ed6aaf3d48812dd6b5722f7af70f6f94fcf0a05ec7bc79e6c2c

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/multidex.version.xml

MD5
3ab7caffc3fa49d4d6898b1158b8ca88

SHA1
3180584b225fbff17767ec480dfe09126e3bf311

SHA256
ff3ad49645df86ffb72005e1bc836279a29034eef3071291e7da0494a4b553f9

SHA512
e5e2855d42e613aabcb10fa1d69b83617576a51ae0e74e0322b4c88551e4761ea91352060fe117bd46fc0f9e86b8f21b4f816e5b31864d40e4ea198718b4b5b7

Download Submit