a09d435c5988e77ca115bdfe456821b9622994fd419645c0a2d07bc4658535f0

Resubmissions

07-08-2021 15:35

210807-y36fw5j5ce 8

07-08-2021 15:30

210807-8f2q58lffa 8

Analysis

max time kernel
558041s
max time network
110s
platform
android_x64
resource
android-x64-arm64
submitted
07-08-2021 15:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Kurulum.apk
Size

1.5MB
MD5

0a64111f4ad75eec84d10de7f1b89c6c
SHA1

c2c1598f562f319e6a7ea0e3879218584f097c08
SHA256

a09d435c5988e77ca115bdfe456821b9622994fd419645c0a2d07bc4658535f0
SHA512

b53902334be10eaf0a2d17146efccb2b84e9f1bb82fcb234d02eca7fed65b65ecc4eb58a85621547dc574cc1a301a04b92934acdbd49c857d64b84dabafa0261

Score

7^/10

obfuscation

Malware Config

Signatures

Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.

Processes:

com.bzyidn.rajgylsl

ioc pid process

/data/user/0/com.bzyidn.rajgylsl/code_cache/secondary-dexes/base.apk.classes1.zip 4102 com.bzyidn.rajgylsl
Requests enabling of the accessibility settings. 1 IoCs

Processes:

com.bzyidn.rajgylsl

description ioc process

Intent action android.settings.ACCESSIBILITY_SETTINGS com.bzyidn.rajgylsl
Tries to add a device administrator. 1 IoCs

Processes:

com.bzyidn.rajgylsl

description ioc process

Intent action android.app.action.ADD_DEVICE_ADMIN com.bzyidn.rajgylsl

ioc	pid	process
/data/user/0/com.bzyidn.rajgylsl/code_cache/secondary-dexes/base.apk.classes1.zip	4102	com.bzyidn.rajgylsl

description	ioc	process
Intent action	android.settings.ACCESSIBILITY_SETTINGS	com.bzyidn.rajgylsl

description	ioc	process
Intent action	android.app.action.ADD_DEVICE_ADMIN	com.bzyidn.rajgylsl

Uses reflection 3 IoCs

obfuscation

Processes:

com.bzyidn.rajgylsl

description	pid	process
Acesses field com.android.okhttp.internal.tls.OkHostnameVerifier.INSTANCE	4102	com.bzyidn.rajgylsl
Acesses field javax.security.auth.x500.X500Principal.thisX500Name	4102	com.bzyidn.rajgylsl
Acesses field javax.security.auth.x500.X500Principal.thisX500Name	4102	com.bzyidn.rajgylsl

com.bzyidn.rajgylsl
1⤵
- Loads dropped Dex/Jar
- Requests enabling of the accessibility settings.
- Tries to add a device administrator.
- Uses reflection
PID:4102

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.bzyidn.rajgylsl/code_cache/secondary-dexes/MultiDex.lock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.bzyidn.rajgylsl/code_cache/secondary-dexes/base.apk.classes1.zip
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.bzyidn.rajgylsl/code_cache/secondary-dexes/tmp-base.apk.classes4065071835911549959.zip
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml
MD5
291705da366de1fe8bf48e7c01901fe2

SHA1
26029896482df6bad4ff2f4081cc545f4864899a

SHA256
b2fcdb461daa1e2aa53b86cb340446e76d2a2edaca9b0135920e4f46c8e74808

SHA512
4425b6dc0f493b7d15fc27bdebb0e3aa03ea068b54a34181158a6df8c2d7d2febe632aba1cab04733e4e385c13a5e02dd75c9a27fbfd4e931cf1fa97b01328f1

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml
MD5
33e94ff4ecc714431c2b78e175586e41

SHA1
217c642c396ab4b158f7bd8c95fc2da8207454cc

SHA256
479cb8f09e11bc4f17e67a8909dd4dcfa800b8e0bb62f5cb3e077fde3b3941d7

SHA512
04cd85b3790341e5f00edc2d4aac013e8049f6f44aa42e2b8268ead70a27f1e7538d3c0f777ca001f80bb1837a6319f5ed84a20db05cca39077c2eba3a0cf78d

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml
MD5
b4a5080d59cd86cee6d88fa7281872aa

SHA1
e10d99edb59f8555fc1ba3a7d566db3334d816ec

SHA256
3d1718482e66259fb8aa2fb354f899311b9fbaf19b75f8d583572982051d689e

SHA512
b9f43b561263cb8dd7a7e84bb4b34cf3416e8ef7445ca0743946dc8478cd13d840f39938e46639e100bb227de87f57b0d18a1e8bf500fc6f2b2ed228f9ed5498

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml
MD5
7c4e0f302e94f9ee4fead30ee0ab464d

SHA1
7ddb813ca8f66f9315d893bb9e440471f35b58d3

SHA256
4da8ffd77a7f051edebdf07d4768d6ea8eef9eb4f61d2003ef2738aa16b6203d

SHA512
3ca8a9bcbb737fb9549801430fb77c6ec6604dea7560b2277bd5b179769151325bd809cf216b6f3e9a63bd2e8b939bdfab5e5230d959deb236ced8dfd2cdc8af

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml
MD5
804f081873079f8f887c9c23e445b3c1

SHA1
a73fd639ca092734a2df9c1fc533d540139375bb

SHA256
f19310c8a3c6d3d98ec57bbe0eb1d0b12020991f636aabdb20088452f21ea71e

SHA512
b0e402d0269806f35afd01df09d838214f3c3e11f3fd80a057a654502cbabc5a75ba1ede901df683b0ed0c139b03f1c766fba9a67995948d8d25c58b625c86e3

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml
MD5
e39d7f0d15c1e9ecd6dd3d5929d0b626

SHA1
96d3c30083d9defc9f8bfc0684f33791e0b1fe68

SHA256
282c44747d75b0129fd2a7f2e93a7186c383aa2c04d5a948b2503b00afdfdce4

SHA512
587389acb2ca794f24d8b70a0f0e3b83b456eb3f6fd21cc4485b83dba0873f8496d48fc23cdf8b8275ca4a6826eb5c4f0023535d41490c1d7de24d448d79e154

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml
MD5
b420481e262af687e7fd5eaa4af18076

SHA1
8ed913686612408fcdaaa5db15eff341864751ee

SHA256
bb0a4c274835cbce42bd91435209b4b56f373c0bf63a48ab5c2074ef348d775d

SHA512
aeb6a071d0318b46dc93f40b5fa8f098f5b38f537e78fa7b17398e11f48c926a503df1fcb60021c437f5ad28e7f39b3841990f3f8e798d9a37fb09d317e70b67

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml
MD5
1c0f2211bca9fca822318201d08e9208

SHA1
5200b104e563d8cb4b5c916d7406bffc2c1c031f

SHA256
7e90f5e0f0ef4ba6093444a6dcae6590b6daf284d968ea9d2042ef22ad94f9f8

SHA512
4429ff994b607370368fe5516e935bfd8055d4d3eb29c44ace66b208f23b9ba074fda652d4c2cb9d5580e6ce7773f46326fa5a43b740451bf073bf469395e3db

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml
MD5
e44dc072beebfb6688afd34408339659

SHA1
5c4af2a68e3b4e983db284531990c684aa3917fc

SHA256
46ac60055cf0f9252c4f9d647fff19c54806760d6194abcd46097c4963e69df6

SHA512
3303ea3349c5aab26c8665da62c7443e64cfd9bbbe58dabf2f53c413b184ad266b45154f391e01c958e65ecec7afdf45d59829f3e5f6657598641288282f0023

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml
MD5
1a737e96d283a443ba6c072a7e8e1557

SHA1
068d64f1c826ca27a4e853443e0ea65b7c608737

SHA256
8c19be2e1ca33b5682ee77aa0876dccf52fca3a2888d270e29cf0bdd6a1ff889

SHA512
3a728e5cfef490b762d2f3357a7942ea71cab38f88edd703249e8444b918b870cda9b1c79686da9bd31d5b961f02fb3ec8396d9b12cc408272df097afb1ae6be

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/com.bzyidn.rajgylsl.xml
MD5
74c7db837ad02d32230d0deb9f2dde38

SHA1
8ed19b0e927fdf608b7106dc94b756863882c5c6

SHA256
51d8273b636405495368854c4723f01104930abd6b4d245a7d976703c4cfb86b

SHA512
f81a0b2394a12a028166e4569171bd023142f8a189aa59d4187038b187e28a4c4978ae5297bd4680607a2c4f35db479b812208f0839434004eff9ca2d7b3f29f

Download Submit
/data/user/0/com.bzyidn.rajgylsl/shared_prefs/multidex.version.xml
MD5
d1bcc352265a7701ef4d9ae972470142

SHA1
b97e4be6c158bd62c2458292c2c1fb2c498f4bef

SHA256
d3f5bca0700be7130e169f3872004861937ae29b3cd5f8537498f5f35b5b80ae

SHA512
e9fe99a1e1286fd6e3b794d4005b626672fecf1c016a56006b11015e013ce8b237b4b8bd9d705a83b54f0470aaf4d6eb139f4ec39650d29234837b7209d64d6f

Download Submit