Analysis

  • max time kernel
    1446517s
  • max time network
    19s
  • platform
    android_x64
  • resource
    android-x64
  • submitted
    17-08-2021 22:24

General

  • Target

    Update.apk

  • Size

    3.1MB

  • MD5

    dd56fcc8c60b93ff7292e1de873eaecc

  • SHA1

    e3102ff909a130605115b6d75dbe20834c3137d8

  • SHA256

    f020ae19916f4c2ba2934163eb78f047a34068d9d28d2ab431d1aae7dc72b37b

  • SHA512

    f8c2a06e5f20f0a018fab0bc52a4bb0588e51b2f2a535257d16b1de91f582e6df94289a5f4637ed9d56a6c262ce38ac55404a400e77a37c48c8df1a037cfc59e

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Requests enabling of the accessibility settings. 1 IoCs

Processes

  • com.czwdcf.fpbwtamg
    1⤵
    • Loads dropped Dex/Jar
    • Requests enabling of the accessibility settings.
    PID:3607

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.czwdcf.fpbwtamg/code_cache/secondary-dexes/MultiDex.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.czwdcf.fpbwtamg/code_cache/secondary-dexes/base.apk.classes1.zip
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.czwdcf.fpbwtamg/code_cache/secondary-dexes/tmp-base.apk.classes2455399283223036363.zip
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.czwdcf.fpbwtamg/shared_prefs/multidex.version.xml
    MD5

    c63285aebe67a78d3b379947bfe69e90

    SHA1

    74808438259235da564ae9ad4b7d358a4766da26

    SHA256

    efadee1c89aa826bd2ca3985c889858548f56673f0b1571891942118785c3622

    SHA512

    54cb2035b1ec897a6d729b7c46b0d7920510c0155f2e6e211d950abb84351e1d6acb2a23f67c26cf93a213dfcff7851c7fe2844ab453ffb6507dd183b8e10204