Analysis
-
max time kernel
734919s -
max time network
16s -
platform
android_x64 -
resource
android-x64 -
submitted
28-09-2021 09:45
Static task
static1
Behavioral task
behavioral1
Sample
2de0f59fd03512e5527c8b8b19595483564ae54cd4904457c4f5bf127949019d.apk
Resource
android-x64
android_x64
0 signatures
0 seconds
General
-
Target
2de0f59fd03512e5527c8b8b19595483564ae54cd4904457c4f5bf127949019d.apk
-
Size
3.5MB
-
MD5
678317ea1af55da1cddab31417a3c173
-
SHA1
07f0fb32e675ae022c96a54ac4ed7aa0c21c052d
-
SHA256
2de0f59fd03512e5527c8b8b19595483564ae54cd4904457c4f5bf127949019d
-
SHA512
b135fbedddfb0c1942a59ac016159273ad0f50b717412520a22b48bc2c953134033930dcd751fc7018abcf765908f954f27b5b0f1ba323a914e090cd232a6df7
Score
7/10
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.hxfumpfgokky.bufvpk/code_cache/secondary-dexes/base.apk.classes1.zip 3647 com.hxfumpfgokky.bufvpk -
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.hxfumpfgokky.bufvpk -
Uses reflection 58 IoCs
description pid Process Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.luhawehaho$a.m23178070 3647 com.hxfumpfgokky.bufvpk Invokes method n0.c.m7fc56270 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.jabupezosani.m877db9c7 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.jabupezosani.m3ca6da2b 3647 com.hxfumpfgokky.bufvpk Invokes method q.c.f 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.jabupezosani.m5b8ec5ff 3647 com.hxfumpfgokky.bufvpk Invokes method n0.c.m8fa14cdd 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.jabupezosani.m6dcac249 3647 com.hxfumpfgokky.bufvpk Invokes method j1.j.m9dd4e461 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.jabupezosani.mc69e25a1 3647 com.hxfumpfgokky.bufvpk Invokes method q.c.j 3647 com.hxfumpfgokky.bufvpk Invokes method com.hxfumpfgokky.bufvpk.jabupezosani.mf59a087c 3647 com.hxfumpfgokky.bufvpk